Recently there has been unauthorised use of my ADSL ISP account on four seperate occasions. On each occasion i changed my password, multiple letters and numbers. However this continues to happen. I have scanned the system with full, updated versions, of Norton 2002/2002, panda online scan, and mcaffee online scan. I have also mapped the drive accross lan, and scanned with norton from a 'clean' system. On all occasions i have detected nothing. As of yesterday i installed zonealarm pro. From a fresh boot, this is what is accessing the net. Generic Host Process for win32 services listening to ports:TCP: 3003,3002 UDP:53,67 Generic Host Process for win32 services listening to ports:TCP: 2869, 5000 These are marked down as two seperate processes. Is this normal?!?

Those are part of Windows XP (svchost.exe) With Zone Alarm Pro, you can block them easily, but I have known some where it prevented their internet access. As far that being your culprit, that would make Microsoft or trojan attached to that service illegally.