Well, seriously though, I would look into the windows register, if this thing is starting on its own it's probably there. If you find the right keys in the register you could easily take it out. There was this program that would let you see what was being read on the register and you could use it to monitor it and keep track of that keys are being accessed, but I don't remember the program's name, a google search could do the trick though.