@MikeSaurbaugh I just want to ask him AV, IPS, DLP and Firewalls didnt catch shadyrat... so those all should be thrown out right? SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique