A couple of days ago my daughter started experiencing a number of problems on her desktop computer. Upon investigation I found that the Firewall had been disabled. I managed to restore the firewall and ran a full scan using NOD32 (which had been running all the time any way). Everything seemed to be OK. Now NOD is reporting that Sky.Zbot.IB (a variant thereof) is running a program rdr.exe (?) from 77.122.133.X. Every time the NOD message appears I terminate the process. I assume that the computer has been infected by some kind of Trojan which is 'calling home'. I also assume that it was the Trojan which disabled the firewall. I am now running another NOD full scan. Will NOD remove whatever is on the computer to stop this from keep happening? If not does any one have any advice as to what I need to do? Can I block the IP range with the Windows XP firewall? Thanks in advance for any help offered.