Perhaps I exaggerated for effect and was overly dramatic? Or just being silly about MBAM and Defender feeling heavy, since things didn't seem to be progressing in this thread. But to state it plainly, I agree with you, the less real-time AV running the better, so I don't really have much to contribute here about running two at the same time. I'm headed the other direction, trying to get it down to none. I'd have MBAM set to on-demand if I could figure out what to do about my one vulnerability with Sandboxie: downloaded files.