Sometimes it recognizes “Unknown activity” of a process known by me (first time message), but it identifies the wrong process. For example I updated my definitions for SpywareBlaster and changed the protection for the new downloaded definitions, CounterSpy said vlc.exe (VideoLAN Client) is changing the list of blocked domains. Wrong. It was SpywareBlaster. Same for Spybot Search & Destroy, downloaded updated definitions and applied them to system, CounterSpy believed it was Total Commander changing internet protection and domain settings.