Yeah I have had to deal with several variations of this one and the End user is convinced that it is safe because of the names they give it and then they think it is Microsoft trying to rip them off. I am trying to educate them but it is a pain to get rid of I had one only last week that wouldn't even let me do system restore to an earlier time because that was disabled in normal mode as well. I finally got into safe and sorted it out.