At 07:57 AM 10/30/2001, John D. Hardin wrote: >That looks like the BO-autorun-email-attack portion of Nimda. In that case, I'm surprised that this is the first one we've trapped. BTW, what is "BO-autorun"? --Brett