Spyware doing malware things. I guess it is unexpected in this case, but in hindsight just confirming its malware character.