Hi I noticed on my brothers computer every now and then the above mentioned program pops up. It says its scanning email to a certain address on port 110, which turns out was some marketing company. Another time the address showed some random looking IP address, which was untraceable after a certain number of hops. The only email client installed is outlook express, which is set to the comcast/adelphia account. I installed sygate to make sure nothing strange is going on, but this bothers me.