Can you use Process Explorer and discover which process is invoking that popup?