I use to work in search advertising and we've had people do this to our sites too. The malware doesn't just change the default search it also replaces the ads on our pages in your browser with their own ones. So they get the money and we get the spam and malware complaints.