He just submitted what symantec calls "Downloader.misleadapp". What this does is "Downloads misleading applications on to the compromised computer." ( link here ---> http://securityresponse.symantec.com/secur...-061114-0840-99 ) Before submitting this i was wondering if KM9 usually comes up as false positive. Nope. Couldn't find Sh*t on the subject. Whether or not it was ProMasser, we never will know.... But you'd figure somebody that wants you to donate $20 to write a "hack" for starcraft wouldn't submit stuff like that unknowingly. ;)