If you have a sniffer trace file or a log of the activity of the new Nimda.E worm that has begun spreading in APAC, would you kindly send me an email? From those that reply, I can pick one or two to request they send them to me. (saves me from getting 100 emails with logs/traces in them) The new worm is reported here: http://www.zdnet.com/zdnn/stories/news/0,4586,5098988,00.html As this article indicates, the fixes for the original Nimda should work for this as well. Nonetheless, I'm still looking for a trace of it. Thanks!! -BM