Turns out an extension I had installed "Live HTTP Headers" was a clone and the creator used it for referral fraud.
Anyway if something like this happens to you check your extensions, mine's webpage on the chrome store gave an 404 error.
Also search for "extsgo" in "%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions" to see if there's any extension infected.