Have done some further testing… trying to figure out more specifics about these 2 items that keep getting added to my HD root. Yes, it is a log in that creates them, not necessarily a re-boot. Yes, MalWareBytes says my system is clean. Yes, I looked at my Little Snitch config and denied anything from Adobe (AAM Updates, Acrobat Update Helper, Adobe Desktop Service, Adobe Flash Player Install and Adobe Photoshop Lightroom 5, AGSService) ALL of which were listed as login items. Looking closer that AGSService ALSO wants to not JUST connect to Adobe, but to Amazon AWS… but it looks like that is in service to Adobe.
For the life of my I can not figure out why these things keep getting added during login… anyone have any clues?