Calling the bank and changing things is done, i just hoped to get the actual cracker into some trouble. No, nobody had physical access to the comp, she lives on an all girls dorm floor, i've met the girls they're not computer litterate, especially not her roomate. She said that the people who take care of the computers at her school needed to check hers out before they would allow it access to the network again, at first they though she had sasser but then said she had a keylogger. Memory, my first thought was to get a look at the code, but if it's compiled how would i do that, i don't know much about reverse engineering could you help me out here?