http://netscape.com.com/2100-1105_2-5059263.html Ok so maybe it was this *attack* via IRC and RPC that infected the windoze server. Had M$ applied the patch it wouldn't have succeeded. So it could be it was not the worm, but it is certainly related. BTW - this is not the article I read about the windows update site be cracked. I'm still looking for the link. Brian