Start Firefox in Diagnose Firefox issues using Troubleshoot Mode to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).

• Don't make any changes on the Safe mode start window.
• https://support.mozilla.com/kb/Safe+Mode

Do a malware check with some malware scanning programs.
You need to scan with all programs because each program detects different malware.
Make sure that you update each program to get the latest version of their databases before doing a scan.

• http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
• http://www.superantispyware.com/ - SuperAntispyware
• http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
• http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
• http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free

See also:

• "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

Hi, I'm Heath and I work for Carsales Network (which runs carpoint.com.au).

Just to confirm, this isn't official software or a promotional tool from carpoint.com.au. I have no idea where it came from, but taking appropriate steps to remove the software as soon as you can is the best course of action.

Our IT guys are looking into it now so that we can put up a fix on our online safety page.

I had this problem also -- I believe it is caused by the carpoint ad embedded in http://aca.ninemsn.com.au/investigations/ (and probably other sites).

(You may need to reload until the carpoint ad is loaded)

It seems that after this page is loaded for about 1 minute (maybe it is just my machine) then pressing enter will cause carpoint tabs to open. If i close the aca tab, the behavior goes away.

From a packet capture the referer field in the HTTP headers for the new carpoint tabs is http://aca.ninemsn.com.au/investigations/. Which makes me further believe that it is the flash ad at the top of the page

I have packet captures/etc if you want me to look into it further.