I found in my temp folder that there is a temp file there with an .exe extension....I tried deleting it many times before and it struck me as unusual when I couldnt delete it- "access denied". Later, I was checking out my ZA allowed programs list and noticed a program I did not recognise called deld192.exe. I checked it's path to learn more about it and it's path was c:\windows\temp. Since this discovery, I've downloaded a HEX editor to open up the temp file to get a better look. But it's never the same, it's on some kind of random modulation, constantly changing file name and content, but obviously whatever objective it has, that never changes. I've also downloaded a sniffer to learn more about it. I'm currently tracking it's connections to see where it's communicating to and it's origin. In the ZA program list I blocked it's internet connections and unbelievably, the temp file has somehow created another .exe program that was connecting to the net. As a precaution (advice from a friend) I uninstalled ZA, rebooted, reinstalled and rebooted again and it was really to no avail. It has made no difference to the femp file. But it makes interesting study! It's not doing harm so far and I'm tracking it's communication when I let it communicate At the end of an internet session, the temp file seems to have duplicated itself into slightly different file names, but when i opened these, there was a heck lot more activity in these deleteable versions of the original temp file (which still remains). It appears to have very trojan-like behaviour. If anyone's got something similar, let me know. BTW- i tried to post this message when i was logged in and i wasnt remainning logged in. So here i am. Whats up with that?