I'll check when I get back but I found a thread on Reddit that described this.  Found a hidden folder and some fake startup tasks.  Once deleted it seems to have gone away!  Ridiculous QB has not made this more public.  My theory is it came from their servers and nothing a user clicked on.