|just to give a quick reply have you checked|
this key can be found elsewhere as well.
second place to check is schedualed tasks.
you could also in theory run a hijack this log, and i could look at it. feel free to private message it if you want