WOW! This is interesting! May I please request that you educate me on this matter - checking on execution could provide better protection than checking read/write. Am I correct?Emsisoft dev said many times in their forums that he personally liked set Emsisoft to check only on execution and I understand why. Since the begining that's how it was supposed to be, block the execution of bad code. Checking all read/write with no restrictions on old HDD can leave to even poor protection I can tell you that.