I can't say I'm a great expert on this, but something I've found over time is, if using a MS OS, then some virii like to hide in the system restore area if enabled, and can respawn themselves from there and operate quite happily from this location. The only way I've found to really delete them is to start up in safe mode run any anti everything tools, delete the system restore archive(s) (I always have sys restore disabled on my own systems) hunt down any strange files that seem to hook into Windows Services and delete and remove anything in registry and then reboot. I also occasionally uninstall the firewall and virus checker utility and then re-install a clean copy (disconnected from the WAN/LAN naturally). Is it possible for some one to have rewritten the firmware in your router and 'updated' it remotely? I know my router allows for external upgrading to be enabled. Colin -- cdb, colin@btech-online.co.uk on 21/02/2009 Web presence: www.btech-online.co.uk Hosted by: www.1and1.co.uk/?k_id=7988359 -- http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist