That was the picture link I had posted earlier, which makes me think "virus/worm". And no, the student doesn't attend or is anywhere near UTK.

I went through the thread he posted on the student forum and he mentions that every time he changed his "internet options" they got changed again. The popup is for a "survey" (to make money at home).