Ok, so when I open IE, microsoft anti spyware says that an application change has been blocked, and spyware asks if i want to allow a change to a user specific browser toolbar(i say no). when i follow the microsoft warning, it leads me to a list of blocked IE browsers. the only thing on the list is:

c:\windows\system32\browseui.dll

anyhow, does that help? I can show on my firewall log the list of intrusions, but the last entry seems to be from april 15th
does this help?