Just finished a download of about five or six security downloads pushed at me from Microsoft.
Rebooted as was necessary and was confronted by Prevx that an entity had been "JAILED".
As I recall, Prevx referred to it as 000004_tmp.dll.
Prevx reported, upon being asked for details, that this menace has only just appeared in the last 24 hr period on about 900 or so machines. Prevx listed its characteristics as "appearing" and "disappearing".
I questioned Prevx' accuracy on this analysis, with a note thru their site, by pointing out that this is probably legitimate to the security update process.
Prevx responded by pitching a little fit and shutting down.
