I've also been experiencing the same issue that when I attempt to browse to Google it comes up with a NGinx page. So I started typing the https:// to avoid the issue. currently running malwarebytes which has found 19 corrupted instances so far. It can truly be a nuisance sometimes.