Found this out after I'm using my cousin's notebook and getting some pr0n ads popping even within Yahoo Mail. Did a rootkit check and ran HijackThis and discovered a rogue DLL that's being loaded onto memory within startup. It also had a log file to record processes and an XML file -- designated as a "campaign" data file -- full of addresses traced ( Read more... )