When the boot-scan is scheduled, open regedit and check the value BootExecute in the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
What is its content?