This worm seems to be gaining ground even though it must be launched intentionally. The attachment name is constant; it's gone.scr. See http://securityresponse.symantec.com/avcenter/venc/data/w32.goner.a@mm.html --Brett