I had this and finally tracked it down to something
starting form the Registry with a name like 'Windows
Update' or something so I didn't suspect it.
Check your
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Run
Also look for anything suspicious in RunOnce, RunOnceEx,
RunServices, and RunServicesOnce.