> I think a more likely explanation is that his detection software is flagging anything with the path "c:\windows\SL" as malware. "SL" stands for "Samsung Lapt

> I think a more likely explanation is that his detection software is flagging anything with the path "c:\windows\SL" as malware. "SL" stands for "Samsung Laptop," some manufacturer-specific software?