I have the same problem. The scanner detected and removed jh1d.exe yesterday. However, when starting my computer today, jh1e.exe appears in C:/temp at boot and runs in the same way that jh1d.exe does. I also ran process explorer, and clicked "View -> Show Process Tree" and found that the parent process of "jh1e.exe" is "monitor.exe" and "Mutual Monitor" service is registered in this process. So, I am going to stop this parent process and delete monitor.exe, and stop the service. Further, I am going to delete this service using DOS command (sc delete Mutual Monitor). Is this procedure OK? Please give me some suggestions. Sincerely, Yuyu