hey, thanks for followup!!

The alert pops up when i
- dial up to internet
- submit yahoo search, no alert given when i google or do submit in other webpages, i just check the file properties and it says
Created: Friday, August 17, 2001, 8:02:03 PM
...
seems normal.

I followed your advice, i restarted the computer, then i found dsound.exe listed in the process list in the windows task manager. i do check the process list whenever i feel the computer is behaving weird, but i don't remember if i saw dsound.exe before. so, i ended the process to see what will happen, then i dial up, no popup.. and there is no alert when i submit yahoo search now.

I think i will continue to end the process for a while to see if anything abnormal happens, if no, then i will block it.

thanks!