Normal
Thanks [USER=86910]@struppigel[/USER] , but it is strange that ESET is the only AV to detect this kind of action.