Thanks Zyndstoff for looking into that. Perhaps we are dealing with malware.