I have not clean-room reproduced this, but I've seen on two machines now that the Ad-Block chrome extension is injecting browser hijacker content. I've reported to support@ and the Chrome store. I don't know if this is a source infection or if one of the rule lists has a bad actor (are rewrites possible in Ad-Block lists?)