I found the source of the spyware, took me awhile to track it but fantasy baseball message boards came to the rescue. I had a feeling that if the problem existed on that site, and I just wasn’t seeing it, that those fantasy baseball folks would be talking about it. Apparently the ads I got were safe, but they had some ads in their rotation that were downloading spyware.
Unfortunately I do not know if the offending ads were popups or banner, and neither does anyone else. They do appear to have used an ActiveX hole. Perhaps even one that doesn’t exist on my machine but did on his? Maybe it’s time to force everyone to use Mozilla or Firefox? Yeah, that’ll happen!