We had that happen to a couple of our sites running windows with IIS. Turned out to be the frontpage extensions that were active on a site that we no longer really used but it was still active. Needless to say we removed the frontpage extensions and restored the sites.