cool thanx, but where else can i look to see if there is anything abnormal on my system.
also what sort of ports should i be looking out for in 'netstat -an' also i heard that ICMP doesn't use ports... so how does it work and how do i find if anything was using that?