While I would first expect malware, I have had heard of issues similar that are resolved by blowing away the browser config. A simple test for that would be to create a new user or try to connect from a guest account if one exists on the box.