Ok, some good news, and a minor concern. After uninstalling and reinstalling with 3.2.1., the trojan now cannot execute. When i attempt to launch them, i get this showing up in tds: 07:57:39 [ExecProt] WARNING: c:\my downloads\sub7\sub7.exe has been blocked from executing 07:58:14 [ExecProt] WARNING: c:\my downloads\sub7\sin.exe has been blocked from executing 07:58:27 [ExecProt] WARNING: c:\my downloads\sub7\editserver.exe has been blocked from executing The concern I have is, tds-3 gave me NO NOTICE that it had done this. I have it running minimized in my sys tray. If I hadn't right clicked on it and selected 'show', i wouldn't have known that a nasty was trying to launch. So, how do I configure tds-3 to TELL ME when it's stopped a nasty? I don't know what's different now, but at least it's working so that makes me VERY happy. One thing I noticed when I did the uninstall, I could not delete the exec protect dll until i rebooted. Something was still using it, so I don't know if repeated attempts to install execution protection locked it up or something, maybe that was it. One other thing, the only way I could find to check accurately what version I was running was in the control panel/add or remove programs app. There it listed tds as 3.2.1.. I find it very confusing that when it initially loads it shows the wrong version, and in the help/about menu it shows NO VERSION. This is something that should be remedied.