I just noticed an empty folder in my C: root - C:\OpenCandy. It was created 2008/11/10. There are no other folders/files on my system matching this name. Googling gives lots of pages with repetitive comments apparently originating from the home site: http://opencandy.com/. One page points out that this is adware and apparently installs itself when you download some other package. http://www.blogowogo.com/blog_article.php?aid=1799674&t=5 There are registry entries under, HKLM\Software\OpenCandy, HKEY_USERS\..\Software\Microsoft\Internet Explorer\Explorer Bars I don't see any way to de-install the package. Nothing on the minimalist blog. Very poor manners! I'd also like to find out which package carried this as a payload - I'll be sure to rant, etc. when I uncover it. Probably can do via the datetime stamp on the root folder and my installation history.