That's what we suspect too. I've been using pslist to see if I catch the culprit and no luck so far.  No external process that I can see.

We do start...