I found that popup from clickbank which looks like a DOS window:

html>
head>
title>System Performance Wizard</title>
style type="text/css">p, div {font-family: MS Sans Serif, Verdana, Arial; font-size:12px; }
.title {font-family: Verdana, Arial; font-size:13px; font-weight:bold;}
.hand {cursor:hand;}
td { font-family: "Lucida Console"; font-size:14px; ; color: #c3c3c3}
.boxes {BACKGROUND-COLOR: #e9e9e9; BORDER-BOTTOM: #999999 1px solid; BORDER-LEFT: #999999 1px solid; BORDER-RIGHT: #999999 1px solid; BORDER-TOP: #999999 1px solid; FONT-SIZE: 10pt}
/style>
script language="JavaScript">
var sUserAgent;
var agt=navigator.userAgent.toLowerCase();
var bWindows = ( (agt.indexOf("win")!=-1) || (agt.indexOf("16bit")!=-1) );
var bWindows95 = ((agt.indexOf("win95")!=-1) || (agt.indexOf("windows 95")!=-1));
var bWindowsme = ((agt.indexOf("win 9x 4.90")!=-1));
var bWindows2k = ((agt.indexOf("windows nt 5.0")!=-1));
var bWindowsXP = ((agt.indexOf("windows nt 5.1")!=-1));
var bWindows98 = ((agt.indexOf("win98")!=-1) || (agt.indexOf("windows 98")!=-1));
var bWindowsnt = ((agt.indexOf("winnt")!=-1) || (agt.indexOf("windows nt")!=-1));
if (bWindowsXP == true) sUserAgent = 'Windows<sup><font face="Tahoma" size="1">®</sup></font> XP';
else if (bWindows2k == true) sUserAgent = 'Windows<sup><font face="Tahoma" size="1">®</sup></font> 2000';
else if (bWindowsme == true) sUserAgent = 'Windows<sup><font face="Tahoma" size="1">®</sup></font> Me';
else if (bWindowsnt == true) sUserAgent = 'Windows<sup><font face="Tahoma" size="1">®</sup></font> NT';
else if (bWindows95 == true) sUserAgent = 'Windows<sup><font face="Tahoma" size="1">®</sup></font> 95';
else if (bWindows98 == true) sUserAgent = 'Windows<sup><font face="Tahoma" size="1">®</sup></font> 98';
else sUserAgent = 'Windows<sup><font face="Tahoma" size="1">®</sup></font>';

function checksize() {
window.resizeTo(655,350);
window.moveTo(0,0)
}
checksize();
/script>

/head>

body bgcolor="#000000" text="#000000" leftmargin="0" topmargin="0" rightmargin="0" bottommargin="0" marginwidth="0" marginheight="0" onClick="window.open('http://hop.clickbank.net/?bnetjfpops/trekblue8', '','height=400,width=800,location=1,scrollbars=1,resizable=1,status=1')">
table width="100%" cellspacing="0" cellpadding="0" border="0"><tr><td align="right">advertisement</td></tr></table>
table width="600" cellspacing="0" cellpadding="0" border="0" align="left">
tr>
td>
C:\>syscheck

blockquote> ALERT: If you are using &lt;script language="javascript">document.write(sUserAgent)/script>, your PC is most likely infected with SpyWare. br>
Would you like to scan your system now for potentially harmful SpyWare installed on your PC? [Yes/No]

CLICK
input type="button" name="yes" value=" Yes " class="boxes">
TO BEGIN [RECOMMENDED]

br>
/blockquote>

C:\>img src="../cursor.gif" width="10" height="12"> /td>
/tr>
/table>
p>d/p>
p> /p>
/body>
/html>