We had this last week.

You need to find which machine on the network is infected and intercepting the HTTP packets.

It's typically NOT the machine displaying the 20 B's in the browser.

If it's a small network with a single segment, start unplugging one machine at a time until you can identify the source.

If it's a large network, you'll need a sniffer to determine which machine is doing the...