SMC.EXE (Sygate) tried to modify an existing driver/service vsdatant and create a global GetMessage hook. Is it ok to allow these or do I need to dig out a rootkit trojan. Does Nortons AV 2005 have vsdatant in its programming because vsdatant belongs to zone alarm firewall. I tried to find vadatant and came up empty. It seems to be in stealth mode. If it is a trojan then somebody has found a way to use it to bypass other firewalls. I only know of two worms that use vsdatant and they have not been detected on this machine. Thank You for your past support and I still think that your products are the best. They have the extras that nobody else has. Now if you could fit all those extras into one UI you would have an application that would blow everbody else out of the water.