it'll be in run once or run there..or possibly even simpler...located in the startup folder...or loaded by preference in your AV package. Shut it off.