definitely rogue background processes… maybe some worms or trojans mixed in. damn things are persistent af, too.