Bullguard is all up to date and I did full scans with that and mbam. Nothing but two ad cookies. Auto updates aren’t enabled either. I’ll keep looking and post if I get any more alerts or find something.
It’s just weird that it happened in two different engine installs when neither were being used at the time.