it might be cleverly hidden malware. Time to dive into the registry yourself, maybe.

And you might care to tell the results of running SAS and MBAM (Super Antispyware and Malwarebytes' Anti Malware) and one or 2 online antivirus checks.

Kees