Hello, No, You haven't this file in that folder. But Could you search a folder named “my document”. Our KL chinese virus lab analyst once told me search that folder. If you also haven’t that folder, Do you use any language input method, such as Sougou or …? Please uninstall the input method and observe related issues. or Do you use any cracked program, just like adobe keygen... This issue is related that the hash of explorer.exe in memory is different in disk detected by anti-rootkit scan. There are something inject to it and string “ my document\svchost.exe” also include in it. Discussion of related issues: https://translate.google.cn/translate?sl=zh-CN&tl=en&u=https%3A%2F%2Fbbs.kafan.cn%2Fthread-2173483-1-1.html Regards. I used a cracked vegas