Tropical, I tried Hijackthis on the machine and found 2 entries targeting the IP addy I mentioned. Deleted both of those, rebooted, and it's fixed.

Charged the guy a sixer of EKU 28.