What you need to do is find the exe that is creating the _update.* in the temp file.. I found on mine that it was sysupdt.exe which was being referred to in the registry under Hklm\software\microsoft\ ...