Hello Numskully,
ARP packet from your popup just queries the ethernet address of 192.168.1.1, I assume that is your router. If you are in a position that you investigate IP to ethernet conversion packets (ARP) you certainly know what is your IP, what is your router's IP. Why don't you post that info for us?
Furthermore, as you no doubt already know, knowing the ethernet address for your router is absolutely essential before you can send any other packet. So it makes no sense to me discussing about why something wants to know the ethernet address for the router, everybody needs that, more interresting perhaps would be to know what the process (be it ither spool32.exe or ashserv.exe - don't what your firewall is trying to say us) wants to send.
Why don't you ignore ARP protocol completely, as it brings no harm and is not routed outside our own house and post us the communication that you are really concerned about.
Thanks a lot,
Lukas.