Hi CDI, it's not a case of anything "catching" it. This isn't a virus, the simple act of running the damn thing is enough to do the damage. One way of checking would be to search for a file (probably kernel32.exe) that would be on drive C: in the Windows directory. A quick way of disabling this would be to rename it (eg Kernel32.old) so that the calling routine would't be able to find this particular component. Another way of checking the system would be to call up the task manager (ctrl-alt-del) and check the running processes to see if anything unexpected is running (eg anything with server in the title, or anything else that you believe shouldn't be running). You could also type msconfig from the START/RUN menu and check what items are scheduled to run on start-up. If any items there appear to be suspicious simply uncheck the box to stop them from staring up on the next reboot. This last method is not foolproof since some apps can reinitialise themselves to reconfigure the start-up files. If any of this is too techie then the next step is to get a suitably qualified person to help, as it is all too easy to inflict a large amount of damage on one's PC when delving into these areas. Hope that this has been of some help.