Always use this Link Removed - Invalid URL to know exactly what a particular process is doing in the background, remember that it's very easy for anyone to rename a virus to just about any other filename. Had to learn that the hard way :regular_smile: