Thanks TomasP and Marcos. Well... this brings "heart attack" to the user... not nice. Don't do it this way. Really, find a way to do it "under the hood". Also, please add a public support KB for this behaviour, to let folks know what is happening here. Also, it will be nice to add a matching log record to the Eset app log for each such operation, so you will be able to show customers a (date-time) match between this feature's action to what the customer have seen on the GUI and found in the windows event log. Thanks!