parametric sql request

due to SQL Injection Attack I use parametric sql request like this
SqlConnection cnx = new SqlConnection(strCnx))
SqlParameter prm;
cnx.Open();
string strQry =
"SELECT Count(*) FROM Users WHERE UserName=@.username ";
int intRecs;
SqlCommand cmd = new SqlCommand(strQry, cnx);
cmd.CommandType= CommandType.Text;
prm = new SqlParameter("@.username",SqlDbType.VarChar,50);
prm.Direction=ParameterDirection.Input;
prm.Value = txtUser.Text;
cmd.Parameters.Add(prm);
but how do I retrieve values ndlr, I have several rows
normally its like SqlDataAdapter ...
DataSet...
DataTable...
foreach (Datarow datarow in DataTable.Rows)
{
.....
}
so how do I retrieve values in parametric request ???

I think there is something missing in the way you are describing your problem. You retrieve data in exactly the same way whether you use parameters or not. For example:SqlDataReader reader = cmd.ExecuteReader(); or through aSqlDataAdapter, etc..