I recently had a problem related to a spybot. Whenever I changed graphics mode, I would get to see a popup captioned frmpop running in the background, rapidly changing a list of ad categories and making a lot of traffic. Same happened when alt+tabing to and from the graphics application. 

After googling around and not having found a solution, I put my laziness aside and accepted the challenge. Here's what I did in order to get rid of it.

I tracked the popup as being ran only when changing graphics mode and going full screen. The launching process was a svchost.exe located in C:\Recycler\ and it was started by services.exe. It figures it was installed as an automatically starting service called WindowHelp.

In order to get rid of it, one needs to stop the service, uninstall it and delete the file C:\Recycler\svchost.exe

1. Run services.msc
2. Stop and disable WindowHelp service
3. Run regedit.exe and delete the following keys :
   
   • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet00x\Services\WindowHelp ( where x may vary from 1 to 9 )
   • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WindowHelp
   Should you know a better way to uninstall a service, by all means use that one.
4. Delete file C:\Recycler\svchost.exe
5. Reboot

Please note that I cannot be held responsible for anything that may happen with your computer after this. Don't do it if you don't know what you're doing.