ml> you may have a rogue browser plugin... what plugins do you have
 ml> installed? you can find them in the options in the advanced area, i
 ml> think... or try CTRL-SHIFT-A and then select the plugins option on
 ml> the left unless it is already selected... please list them all...
 ml> either here or in netmail...  

 RN> 7 of them:

 RN> iTunes Application Detector 1.0.1.1
 RN> M$ DRM 9.0.0.4503 (Netscape Object)
 RN> M$ DRN 9.0.0.4503 (Netscaoe Plugin)
 RN> Quicktime Plug-In 7.7.1 7.7.1.0
 RN> Shockwave Flash 11.3.300.265 <=== This one looks suspicious. 

it is not... the latest version is 11.3.300.268...
  http://www.adobe.com/software/flash/about/

 RN> VLC Web Plugin 2.0.2.0
 RN> Windows Media Player Plug-in Dynamic Link Library 3.0.2.629

the others appear to be fine but i've not looked up their versions to be sure...

 ml> or you might have a critter... either way, something got ya... were
 ml> you asked to install a codec or update flash or something to be
 ml> able to view or listen to something? that's one of the most common
 ml> social engineering methods they use... tell ya flash needs to be
 ml> upgraded and offer something they tell you is flash but is instead
 ml> their critter...

 RN> That is entirely possible, but I don't know which of the listed
 RN> parties is the guilty one.

from the above, i don't see anything untoward...

 ml> but you might have also been hit by a simple drive-by infestation,
 ml> too... what antivirus do you use?

 RN> MSE = Microsoft Security Essentials.

ok...

i will also recommend to drop by Secunia's site and get their PSI
package... it will check your installed software and tell you what needs to
be updated to the most recent... i use it religiously on all my winboxen...

but that doesn't help you with your popups problem... have you taken a trip
thru your installed software in the control panel to see what might have
been slipped in during an update? i've had to go and remove AVG and Chrome
mess that was slipped in during automated updates... the AVG c4rp was very
noticible as it also changed our browsers' search engines and the homepages
chosen for each browser...

ahhh... ya know... the above is also for FF but you might have this stuff
in IE... even if you don't use it, its libraries are still there and they
are used by other software... open IE and check its addons, too...

)\/(ark