Since I upgraded to Windows 10 the calculator has started randomly opening when I go away from my computer. After googling I found out that there could be a worm doing this, but I can't recall downloading any suspicious files and BitDefender's scan came up clean.
I tried to track down where the file was opened from by turning on "Audit process tracking" and looking in the event viewer for clues.
After ~1 hour I got this:
Process Information:
New Process ID: 0x1f30
New Process Name: C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1507.15010.0_x64__8wekyb3d8bbwe\Calculator.exe
Token Elevation Type: %%1938
Mandatory Label: Mandatory Label\Low Mandatory Level
Creator Process ID: 0x38c
Creator Process Name: C:\Windows\System32\svchost.exe
Process Command Line:
Which doesn't tell me a whole lot. Does anyone have any idea how to track down the process that keeps starting it?