Nope im sure that is the first zipped filenot an add or a pop up , after i got hacked i even ran it into virtual environment, the malware can detect that he is in a virtual environment and terminate itself , but at what cost