I don’t think VRDB has anything to do with it… well, try to watch for any suspiciouc changes - if they appear again, you can turn on the creation of the Report file (and include the “OK” files) - so that you can see what exactly has been scanned.