OK, let's kip that for now...I think combofix did the job...didn't have any pop-up for a few hours now. I cross my fingers and get back to you if...
I'm pretty sure I'm infected by Virtumonde. I have bitdefender, scan with webroot spy sweeper and trojan remover and they all found something...
Separate names with a comma.