Hey thanks for the replies. keezel I am not really on all that much, but I usually go to #infoleak on irc.2600.net .. that is where I found the person talking about this trojan. I hadn't seen it before, but after looking around a bit, I found a post talking about it almost a year ago, as nihil pointed out. I agree, it is not very subtle. I have mainly been hearing about the conficker/downadup bug lately. Pretty clever...