What ever you do do not D/L that. If it pops up, it is tied to something bad would be my first guess for sure. All pop ups like that are unknown to the user usually are. Try total safemode scan again. LIke you usually do. Maybe even full safe mode, not networking. Its slow, but methodical also.
Just a thought.