I reckon this is running as a task, could you attach the combofix log please