it reveals the infected app (the cmd app cause yknow it's never on the desktop) could've been a better tip lol thanks for playing