You can use javascript to create pop-up effects that isn't normally stopped by security software - obviously they need javascript turned on.
User friendly Pop under ads, interstitials with CSS, DOM and JavaScript
Don't be tempted to put Adsense in these, you will get banned.
I do use this myself, although not a lot.
Tony