update 21.1 from BUZZHEAVIER - DATANODES - PIXELDRAIN - VIKINGFILE are clean. mega's in site downloader is doing this. but when i upload my files and download them they come clean from mega. it tried to change 90 entries on HKEY_LOCAL_MACHINE. the file on chrome's internal download location 00000003 is there partially downloaded with another file 00000002 being the virus deleted. Sorry for the confusion