Marcia - 3:00 am on Dec 13, 2009 (gmt 0)

Sounds like there's been a "sophisticated" script installed that's sniffing for Google referrers to do the redirect. Mention was made of something like this a while back in the Google forum.

Here's the thread:

Hack Redirect Analysis from Google's John Mueller [webmasterworld.com]