... it with "proof" that I'm not a script, felt like defeat, I decided to get rid of it the hard way. I found a key at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\maib which holds the name of the running .exe. BUT it seems there is another file running as well, called qqk1.exe ...