Last week some ransomware took control of this user's system. Someone was physically interacting with the system remotely. (I didn't write down the name of the ransomware, sorry!) We disconnected the system from the network and ran RogueKiller and MalwareBytes and it has been clean until today. I installed RansomFree on the system as well. This morning, Webroot reported and successfully quarantined WINLGN.EXE, Trojan.Dropper.Gen. The system has been fine since then, but I want to make sure this system is totally clean and it can't be taken over again. Note: Some of the applications flagged bomgar-scc.exe. That's the remote control software we use, so don't worry about anything mentioning Bomgar. Thank you so much!