Check the Downloaded Program Files folder for anything you do not recognize. This is where many rogue BHOs (Browser Helper Objects) reside due to "click-by" installations (ie, you hit a site and, without warning, they install a malicious plugin for IE). Since it happens on R'osity, it must be able to know exactly which site you are at in order to post the links.