I removed the potentially dangerous URL from your original message. I hope Sophos did fix it and not just steal all your important information in that 2 hours I would never let anyone I didn't know personally have remote access to a computer of mine, or of a friend's computer. The risk is just too great.