What is this spyware I keep finding?

[Carbo]

I realize this is not necessarily the forum for a spyware question. So, I'll start by saying I'm running XP Pro. There, now I've discussed my OS. But, my real question is this: Each and every time I run AdAware on my 'puter, it comes up with one component found. And each time it is the same. Can someone identify what this is, where it is coming from, and how do I prevent it from attaching itself to my system in the first place?
Type: Regkey
System: Alexa
HKEY_CURRENT_USER
software\microsoft\internet explorer\explorer bars\{30d02401-6a81-11d0-8274-00c04fd5ae38}
Thank you.

 

[RalfHutter]

Alexa is some spyware that works with IE to collect data on your surfing habits and send it back to the company. Here's their website.

 

[Carbo]

Interesting, RalfHutter. So, if I understand Alexa's website correctly, they are a built in part of IE which tracks the user's movements around the internet? Sneaky SOB's, huh? So, then, everyone using IE5 or later has Alexa on their system? But each time I delete their registry key using AdAware, I eventually find it back on my system. Very strange.............

 

[Blayze]

I have IE 6 on my systems and i have not found that spyware.

Are you sure didn't install something that might have contained that spyware?

 

[bacillus]

just checked & I too don't have that registry entry!

 

[Carbo]

Hmmm........something tells me I had better check to see what my 13 year old daughter might have installed. Wait.........she can't install anything because her profile is user. She has no administrator rights and can't install anything. This gets stranger and stranger.

 

[Nothinman]

Unless you're using NTFS it's trivial to make software install under any user account, even then unless you make sure the permissions are safe you can't be sure. Those type of things just get installed by browsing to a site that wants to install it, most people just say yes to whatever pops up without even thinking.

edit: also since it's under HKEY_CURRENT_USER that means you installed it, because no one can access the HKCU hive of another user (well not easily, or automated that I know of).

Just another reason to browse with Mozilla =)