I think that the notification pops up at every boot, and it just popped up again! sigh. Since I had a screenshot, I was able to compare URLs exactly. I should have thought of comparing them before, because they’re similar, but not exactly the same. I’m attaching the combofix log, and the new screenshot. Thanks, Eva