try going view/showhide put a check next to connections if there's connections remove them if the same ones come up wright down there ip address then block them then search for something you could be connecting to rogue sites.