Currently (May 26, 2012, 10:04 GMT) on the www.getpaint.net homepage, there is a link for Gimp from Google AdSense which does not link to http://www.gimp.net or http://www.gimp.org/downloads/ it has a great big "Download Now" link on it.
I believe that Deisel Weisel may have clicked on a similar link instead of the proper link. It is possible that where ever this link went to, he hit a drive-by script or poisoned image. It is also possible that he could have picked it up somewhere else (*shrug*).
Deisel: if you are still reading this thread, you might try this website for some insight on how to repair your system.
http://www.geekstogo.com/forum/topic/318024-cxpfy-double-underlined-links-appearing-everywhere/
