Dan Swall Uh? More specifics? A metaphor for this problem would be telling me that my car is broken and how I fixed it and simultaneously prevented it from ever occuring again. I'll make up the scenario that happened here I guess. Barbara's computer was infected with spyware and malware due to her browsing habits (Flash game websites and pornographic websites, she's a big gamer nypmth). She eventually contracted SubSeven in the wild and freaked out when the attacker took control of her computer and started moving her mouse cursor and ejecting her optical drive tray. This illustrates at least two problems in the current situation, Cleaning out Barbara's infection and preventing access through the firewall. Cleaning out SubSeven is easy enough, since the package off of the internet comes with a removal tool (in their attempt to legitimize their tool). Removing it was no problem, but I would have to ascretain which port the attacker is using in the mean time to connect to her computer, so I'd run a netstat -A when she was under attack again and see that it was using 37173, the default 'elite' port for the program. I would uninstall the server app from barbara's side and then block the port in the router control panel. Problem solved.