→ “C:_RESTORE” means that Mr.Sparkle seems to use Windows ME, and imho there’s no Boot-Time scan there (only in Win NT/2000XP)

:wink: