I have a client that when they go to finance.yahoo.com they will often get a pop up Window for a Firefox update and asking them to run a firefox-patch.js file. They are smart enough to not run it.
It only happens in Firefox, and only on Yahoo Finance.
In the lower left hand corner, instead of loading and stopping, it keeps trying to load different pages.
I have run every known AV Scanner, looked for issues using FRST and even nuked and paved. After nuke & pave, going back to finance.yahoo.com I still get the the pop-up. This happens on any computer in the network.
I am even using Webroot Filtered DNS as the forwarder on the Windows DNS Server as well as in Untangle.
I'm scratching my head trying to think of what else may be causing this.