Hi Nocturnal,
This doesnt appear to show if anything has been added to
IE
Try checking "Tools" in MSAS on the top bar
then "RealTime Protection" then to "View Security Agent
Events" check the date and time it was displayed and see
if it shows more info in there.
It could be in this area of the registry :
[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Toolbar\WebBrowser]
But you would expect it to show more details like this:
The user blank, has decided to allow the Internet
Explorer Web Browser (EF99BD32-C1FB-11D2-892F-
0090271D4F88) to be added to Internet Explorer
But this may not even be the right area of the registry
as there is alot more that store information on Toolbars,
BHO's and Internet Explorer settings.
Andy