Hello JBravo, I found some details about Winmgmt.exe. Apologies if you were already aware of this. It is a core component of client management in Windows. This process initializes when the first client application connects, or continuously when management applications request its services. The winmgmt.exe file is located in the c:\windows\System32 folder. In other cases, winmgmt.exe is a virus, spyware, trojan or worm. You've already said you've had a good hunt around for the file, so I don't know where else you could look. Have you performed an 'In-depth analysis' with NOD? Bandicoot.