Stefan Bellon wrote: > * ^aUgARAc4MDRN03QDKCQcGBDTLLvXCCMD\+Cnw6E3TNE3g2NDIvLQ0TdM0rKSclIzONk3TiHxwaClv$ I know i'm getting off-topic, but that string does not occur in every instance of the worm's payload. So many/most of them will slip through that filter. -Matt