WSA found w32.infostealer.zeus in Kerbal Space Program a month ago so I did a system image install and kept Kerbal off. Just now I downloaded and ran Kerbal and again WSA found w32.infostealer.zeus while Kerbal was starting up. I stopped the program in mid-load. Kerbal is a fairly popular program, but its website has had a couple of major crashes in the past because of malware or hacking. One time it was down for a week while they sorted things out. I don't have a log to send, sorry, I deleted and erased everything as quickly as possible. I could download and run the program again if absolutely necessary just to get a log, but I'd be happier if someone at Webroot did that. https://kerbalspaceprogram.com/ Doing a search didn't turn up much that was useful, just this Kerbal forum thread where they didn't take the threat very seriously: http://forum.kerbalspaceprogram.com/showthread.php/39086-Patcher-security-concerns-split-post Post #9 seemed to be from someone who knew what they were talking about: "A lot of programs that try to update themselves get incorrectly identified as trojans by antivirus programs, as that's how many trojans operate: They worm their way in, then download a payload that does things, or just update themselves to the latest edition. In this case, the patcher's (broken) autoupdate feature is what's making your antivirus freak out." "If you're concerned, here's a link to an analysis of the Windows patcher. As you'll note, it's UPX packed, which makes it smaller, but also sets off some antiviruses. UPX is basically a ZIP file around the EXE. This site doesn't analyze the file while it's running, so it's not going to detect the self-downloading feature." I would just go with his assessment except for one thing: I think a month ago when I started up Kerbal and WSA found w32.infostealer.zeus there were also other files being flagged rapidly that had nothing to do with Kerbal or anything else on my computer, it was as if they were being downloaded or they came with zeus. Like this time, in my hurry to abort Kerbal while it was starting up and get everything off my computer, I didn't save the information. Let me know if you need anything else.