I see you’ve also had Zoek on the System… Scan this file in VT… C:\Users\Gary\AppData\Roaming\wklnhst.dat C:\Windows\zoek-delete.exe