Could be a shell extension or device driver. Piriform's CCleaner provides a fuller picture of what's running than Task Manager provides, via its Scheduled Tasks and Context Menu Items tabs.
Which AV/Firewall some of the 3rd party products don't go away fully when they're disabled, the only way to be sure is to uninstall.
When you tried Safe mode, was that with or without the network. If without, try Safe mode with network, that might help narrow it down.
BR
|