Have a look at this site: http://www.marshal.com/trace/traceitem.asp?article=567
Then click through to read more about the Srizbi trojan. Scary. I downloaded Regscanner after reading this, and then check the registry for the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RcpApi\(snip), as suggested: fortunately OK. John * * * * ---------------------------------------------------------------------------------------- Unsubscribe by mail to [EMAIL PROTECTED], with 'unsubscribe filmscanners' or 'unsubscribe filmscanners_digest' (as appropriate) in the message title or body