I always crank up Spybot and Adaware when irregularities such as this occur. This may be nothing serious, but a red flag to check for malware.