which thread was this? this usually happens when a forum user's signature contains some links (images or scripts) - which expire and are taken over by malicious scripts that push out ads.