Update: The additional downloads were from this site : ttzmedia.com . I checked the source of the thread which downloaded the data and found this.
Code:
<script language="JavaScript" type="text/javascript">
<!--
var bordercolor="000000";
var bgcolor="ffffff";
var linkcolor="990000";
var hovercolor="005EBF";
var darkfont="000000";
var lightfont="666666";
var desctext="000000";
var pricefont="000000";
var userid="4718";
var adtype="multi";
var adsize = 22;
var fontfamily = "verdana, tahoma";
var ttz = 1;
var channel = 5868;
var keyword= "laptop, digital camera, gps, ipod, mp3 players, plasma tv, camcorders, dvd players";
var PID= "";
var PID2= "";
var PID3= "";
var PID4 = "";
var altcontent = "%3Cscript%20type%3D%22text/javascript%22%3E%3C%21--%0Agoogle_ad_client%20%3D%20%22pub-6549793407717263%22%3B%0A/*%20TD-Forum-Right-Two-5/13/08%20*/%0Agoogle_ad_slot%20%3D%20%223527016155%22%3B%0Agoogle_ad_width%20%3D%20160%3B%0Agoogle_ad_height%20%3D%20600%3B%0A//--%3E%0A%3C/script%3E%0A%3Cscript%20type%3D%22text/javascript%22%0Asrc%3D%22http%3A//pagead2.googlesyndication.com/pagead/show_ads.js%22%3E%0A%3C/script%3E";
-->
</script>
<script src="http://www.ttzmedia.com/affiliate/ttz_ad.js" language="JavaScript"></script>
I have added the site to the blocked websites in KIS. Hope this will solve the issue.
Any other advice?