During virus detection help is launched from local system.
vulners.com/securityvulns/securityvulns:doc:6329