ProcessExplorer will show you what runs under each process so you could see what caused it if it was an executable.