turn on the security audit since you're using xp pro. monitor the log. if it happens again, we shall see.