I've reported a false positive regarding Sandboxie. I added the "detections" to the "Detection Overrides". Moments ago I was going to removed them, and see if the false positives were no longer happening. To my surprise, I saw a couple entries there as well, namely for: C:\Windows\System32\rtutils.dll and C:\Windows\System32\portabledeviceapi.dll These were not added by me, in any way. (I'm also been running Prevx for awhile now, so that I can see if I get the same problems as my relatives do.) Does Prevx add entries there by itself?