[shiprock520]

I found a notepad, in one of my files, with the following:

8.1.2009 20:18:00.348 [904] Scan event handle = 0x90
8.1.2009 20:18:00.551 [904] Using Cyrus SASL 2.1.13
8.1.2009 20:18:00.613 [904] Loading driver
8.1.2009 20:18:00.613 [904] Driver loaded
8.1.2009 20:18:00.863 [904] Loading antispam module
8.1.2009 20:18:01.237 [904] setting regkey=F9$92-9%%$$-HC%28-N5%P9
8.1.2009 20:18:01.237 [904] setting enablefilecleanupon_retrieve=yes
8.1.2009 20:18:01.237 [904] setting ruleupdate=0
8.1.2009 20:18:01.237 [904] setting enabledomaincache=no
8.1.2009 20:18:01.237 [904] setting livefeed=mailshell.net
8.1.2009 20:18:01.237 [904] setting spoofedsenderlist=
8.1.2009 20:18:01.237 [904] setting enableautoupdatedatathread=no
8.1.2009 20:18:01.237 [904] setting rbl_threshold=1:99
8.1.2009 20:18:01.237 [904] setting enable_rules=yes
8.1.2009 20:18:01.237 [904] setting autotrainingthreshold=-1:101
8.1.2009 20:18:01.237 [904] setting dnscachednsserver=
8.1.2009 20:18:01.237 [904] setting trainingwritebuffer=1000
8.1.2009 20:18:01.237 [904] setting enablestatfile=no
8.1.2009 20:18:01.237 [904] setting approvediplist=
8.1.2009 20:18:01.237 [904] setting rbl_timeout=5
8.1.2009 20:18:01.237 [904] setting min_training=100
8.1.2009 20:18:01.237 [904] setting homecountrylist=
8.1.2009 20:18:01.237 [904] setting proxy_authtype=auto

This is montoring every second of my computer, but it started Jan 1, and it's up to about 2.36MB, not alot, but I can't delete because of the title message above. If I could find what program it's open in I would stop it. A clue was Appdata/roaming/windows. Looked but found no clue to what was involved. Windows Vista Home Premium. Any ideas?

[mphenterprises]

Hi shiprock. Try Unlocker which is available by clicking on the hyperlink in this sentence.

[shiprock520]

Unlocker did the job, reports it's related to AVGEMC so thanks I guess I'll leave it alone, Lord knows I bothered it to no end these last few days, thanks

[mphenterprises]

:D With pleasure. :D