Can you show us the list of extensions installed? That would help us identify if the malware came from the browser or the system.