Yep. It sounds like a possible click-activated script working in the background. Increased cycle or network activity might be a good indication.
_________________________
Everyone's entitled to their own opinions, but not their own facts.