I wouldn't think that spyware would cycle through different connections, my guess is a trojan. I do get a connection to mjxads.internet.com with no browsers open.