| Any thoughts on what to do when it executed already? Matthias, As far as I can tell, no one knows yet... I'm hanging in there on http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.a@mm.html until I see it. <rory disposition="down, not out" alt="8J"/>