I had tried blocking ccp.exe, ccpliveupdate.exe, and urcliveupdate.exe, but the prompt still showed up on startup.
Adding rules for urcframe.exe and urcliveupdate8.dll did the trick, however. I wonder if just those two are enough...or even just the DLL file.
Thanks for the working set of blocking rules.