i am grateful for all suggestions received but still tangled up in my problem. i understand the process for down loading latest virus def. ,re-starting in safe mode,stopping trojan process for win.XP and scanning with norton anti-virus but the explanation for editing the registry is a little difficult to come to terms with. i dont feel confident in modifying it as i could do something wrong. also on my alert tracker it is displaying blocked stealth udp port -iyyrhoaqz1 is this the hacker or just a normal add block. once again thanks all for your time and help with this. can you ask too many questions on A/O ?????