I noticed that you mentioned checking "HKLM\..\Run" but I've also seen it in "HKCU\..\Run" just to make matters a bit more of a pain in the buttocks.