I had the same problem, checked Admin tools, events viewer, and found that DCOM was the culprit. It would try to connect to get info or updates, and could not, so it in turn would start the event logger, which would start the pc. Disabled both, services and it has stopped "ghost" starts.