Hi folks, "It comes in an email that looks like it's from Microsoft, and is disguised as a Microsoft Internet Security Update with an attachment. IT LOOKS VERY REAL. It includes the link that makes it look like it's going to Microsoft's site. If activated, it places a trojan backdoor in the infected system. Remember, Microsoft never send emails with updates attached." Does that sound familiar? It's a description of W32.Gibe@mm, which was discovered March 4, 2002. Sounds like Swen/Gibe.F, doesn't it? I wonder how many people got kicked by Darwin twice... http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@xxxxxxx --Scott. To unsubscribe from this list send an email to pcductape-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the Web interface.