Originally Posted by OzMan

Googling that PID brings up a lot of password sites.

It does sound like a hijack but not sure about the email unless you mean that clicking on links in the email also redirected to that PID which may imply the scumware is still on your machine.

I would contact Sagi from AFF in the morning, he will get it figured out but in the meantime as it seems likely the problem is on your end not AFF, I would try a removal tool like Hijack This .

Here's his contact info in case you still need it tomorrow:

ICQ 348950862
sagi AT friendfinderinc Dot com
650-847-3188