A: It may have renamed itself to a random string (e.g., djf83jd.exe ). Look for processes with no description, high memory usage, and a location in AppData\Local\Temp .
A: Almost never. If you wrote the software yourself, it is a false positive. If you downloaded it, it is real. budgieloaderexe
A: Some variants include a keylogger. Change your passwords after removal, especially for banking and email. A: It may have renamed itself to a random string (e