An ex- MS employee on payroll at Trend Micro? ? ?
Hardly! The Xp machine ( my newest one ) was taken over by my wife. I just keep it updated and running or I'll have hell to pay!

Down here in my dungeon I am surrounded by older, some throw-aways, running everything from RH 7.x to FreeBSD 5.3.

Back to my question:
the UltraProtect decompression may ...
Doesn't UltraProtect use Java to decompress? Doesn't the Trend Antivirus also use Java?

Could that be where the problem was? I believe that machine ( the one that did not seem affected ) uses as the Sun Java Default Virtual Machine Version 1.4.2_08-b03.

Any chance the machines that were infected are using the M$ version ?

Just wondering.