If your machine is infected with a TDSS Rootkit, normally everytime you search something on Google, Yahoo, Bing, etc. you will be redirected to a malicious site or to a site that's totally irrelevant to your search topic/string.

When run, the infection is using a similar technique applied by MBR rootkit: all kernel mode and user mode components are stored to the last sectors of the hard drive, outside the file system. By doing so, they appear to be only raw bytes, bypassing every security check. Tdss rootkit bring this trick to a more advanced level, by encoding its components before they are written to the disk. Files are encoded and decoded on the fly.