As the opening poster, I can report that there were no viruses as such, but somewhere along the lines I'd picked a 'utility add-in' called something like "Grand Offers" which must have been installed alongside something I actually wanted. Fortunately it seems to be reasonably well-behaved in the sense that disabling it stopped the behaviour and it uninstalled when asked to.