That is not normal behaviour so I would guess that you have a macro running that is changing the attached template. What do you know about the Normal.dotm and the addins you have running on that machine?
I would hypothesize that
opening Word in Safe Mode would prevent this from happening. If so, you will need to investigate the addins and templates you have running to work out where the code is coming from.