>What does a nimda-infected machine _do_ with the files it requests from a >server? Infect them and send 'em back? Run 'em? I don't think it's trying to grab files, I think it's trying to run commands. newell