only reason I can think of why that happends is because of a virus 'on-access' scanner