You have a infection, post a HJT log in the windows spyware and virus forums. You'll get all the help you need there, if your getting pop up's whilst connected to the net but not browsing or on firefox, your infected. Download HJT from here: http://www.tomcoyote.org/hjt/ Unzip it to it's own folder, for example C:/program files/HJT, run a "full system scan and save logfile" and post it in the windows spyware and virus forums.