Ah that makes sense now, TY. one other question. If I have enable autosandbox mode:ASK, then if something suspicious comes up it asks me and then runs it in sandbox? Do u recommend auto instead ask?