Today, twice ZoneAlarm blocked a program called sethc.exe as shown below.
I clicked “Deny”.
Some say, not a harmful program as long as it is authentic. In addition, this program will usually activate when Shift key is pressed number of times.
Information about sethc.exe
Publisher: Microsoft
ProcessFile: sethc.exe
ProcessName: Windows NT High Contrast Invocation
If this program is part of Microsoft’s Windows then it is harmless and can be trusted. This is just my opinion. However, when it pops again, I still deny it and of course this will become annoying if it happens again and again, or maybe just maybe this is a symptom of infection.
In the end, all I can say is “Trust thy Anti-Virus!”
Joomla! Newyork 
Interaction – SS