Well...fortunately it doesn't appear to be doing any damage...more of a nuisance...hopefully we'll have a solution to this by Monday. I'm still trying to track down the darn file. We actually aren't sure which machine was infected first, but rest assured the infected are being pulled from the network as they show up. We aren't sure how it depicts which route it will take next either...hopefully that will be something else we can find out soon. Thanks for the advise though...and I'll keep you updated...oh...and get you and ric-o that file some time this year