Ok. Yes, the guest box with a couple of ads should be there.
The popups after clicking links was the big clue. Had an old account called Viglink still running that alters link redirects for certain key words. I've removed the old script.. I guess someone had hacked the old code and injecting the malicious crap into them.