I have a dial-up internet connection and sometimes it starts by itself. I suspect this is NOD32 looking for updates but this got me thinking. If such a thing happens, what is the best way to find out which application launched it? I have AMN TM but tracing the parent of rnaapp.exe (assumed dial up process), leads me to VSMON (ZAP). I know that there must be a thread in the OS linking a launced app back to one that launched it but how to find it? Win98SE.