Sorry for the cross-posting... At 12:06PM EST today (12/21), I received 2 copies of an XMAS EXEC that appears to be a 'CHRISTMA EXEC' clone. The copy that I received came from node SAKAAU03, but there is no reason at the current time to believe that it originated there. Please add this filename/filetype to your anti-worm file filters if it isn't there already Valdis Kletnieks Computer Systems Engineer Virginia Polytechnic Institute