i also think that it is posssibly a trojan as well. this sounds like what a program called net devil does which is a back door trojan.
but it usually picked up by Av's and trojan scanners

odd