I'll lock down the ports you recommend 1024-1030, and 137.

How do I find the app that is sending it out? I have an XP sp2 machine that is sending it.

As I said, I have norton's running and ad aware and spybot. all came up clean.

One other thing to note. When I log into the machine. It takes a while for the task bar to become clickable. Longer than the other machines, if that helps at all.

Tif