One of the employees called me yesterday because he wasn't able to open any webpage. So I went to see the problem. I tried to load various urls with Google Chrome, but each time I did, the webpage was redirected to the reimageplus website, which was asking me to download software to repair Windows. I tried loading webpages with IE and there was no problem.
I deleted chrome and re-installed it. I also did a virus scan with Windows Defender.
I thought that this would never happen because the user does not have admin privileges.
What is the most likely cause of the infection and how can we prevent it in the future?