What the hell is wrong with M$ paint?

Every time I try to save something on paint, it tries to connect to some random ip, eg 69.94.107.14, though the last number varies slightly (~10-50).  It would be less annoying if it didn't take 5 minutes for paint to do this.  Strangely, nothing irregular happens if I pull my network cable.  Any idea what's going on?  That ip doesn't seem very suspicious.

Is there a default copy of mspaint.exe I can compare with?

Thanks for your thoughts,
inb4 trojan

>>10
>>12's idea sounds better to me...

>>11
I've heard of hijackthis, but not 2) or 3).  By 4) you mean I should post the entire hex contents of mspaint.exe?

Every time I try to save something (ie screenshot) with mspaint, the thing grinds to a halt, and Kerio personal firewall whines at me.  I wonder why it's whining at me - oh look mspaint is trying to connect somewhere.  For some odd reason none of this happens if the network cable is unplugged; it's as if the virus (?) knows when I'm not connected to the internet.  Yes, I can reproduce it, because it happens every fucking time.