I had printed some coupons, but hadn't installed any coupon printers.
I also installed PDF Xchange from Tracker Software.
Simrick thinks one or the other carried in the virus. However, I'm not too suspicious of PDF Xchange because y'all discussed it in that "useless" thread.
Below is the first day I installed it and had 844 event's, all the same.
It did the same thing four days in a row. Then I removed it and reinstalled it.
The next morning it did this again.
No one could replicate it on their 'puter's at all and I'm not saying it will do anything to yours
but be aware of what it did do to mine.
Since the second MBAM scan came up clean, I guess you can mark this thread as solved.