Well apparently a website I visited today downloaded something Symantec calls "Spyware.ActivmonAgent" and that was causing the problem. It's quarantined and the site is acting normally again.
Somehow it got past the IE7 popup blocker and the realtime AV scan.