>From the SANS newsletter: --Blaster Variants and the RpcSpybot Trojan are Spreading (13/14 August 2003) Two variants of the Blaster worm, Blaster.B and Blaster.C have been detected in Asia. Because of their similarity to the original worm, anti-virus scanners should detect them. In addition, a Trojan named RpcSpybot-A that exploits the same Windows vulnerability that Blaster exploits has been spreading. RpcSpybot creates a backdoor on systems it infects. http://www.pcworld.com/news/article/0,aid,112002,00.asp http://www.theregister.co.uk/content/56/32326.html Jim, version number what of the script are you on know? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com