Hi, and thank you for the help

I use CIS on my own computer, but the computer this happened on was my parents, and they use Trend Micro. I don't really trust TM, but I know my parents (and little brother) wont be able to answer ANY of the defense+ alerts, which I why I don't force it on them. But reading more while I waited for the replay, and also biased on yours replay, I guess to kill whatever explorer.exe did was the right decision
