Firewall administration application launches explorer.exe with Local System privileges if explorer.exe is not running.
vulners.com/securityvulns/securityvulns:doc:13536