As the thread title says, I´m wondering since it´s labelled as a hidden registry entrie/rootkit activitie from MS when scanning with OSAM autorun manager. When trying to google regarding this driver it doesn´t show any info at all. That doesn´t surprise me at all since it keep changing name after each reboot. I can´t delete the driver file either using RkU, it shows "Can´t delete content". Therefore my real question is: when something is shown as a hidden registry entrie/rootkit activitie, and also been labelled coming from a known source (MS in this case), should it be considered as reliable or suspicious? In each laptop/desktop I have with a Windows OS installed (XP), I have one or two of these "hidden entries/rootkit activities" from MS so it kind of worries me a little bit. /C.