On Mon, 13 Feb 1995 18:51:25 EST Jeff Kell said: >Well, as was posted by a NAD there, the exec was written and commented in >Portuguese. This is another common thread that seems to tie things together. >It's the same basic code with minor changes, but are the execs/modules really >originating there, or just being "seeded" there? We had a rash of then a while ago that did appear to originate at a Saudi node. However, this latest outbreak is (I'm 99% certain) of Brazilian origin, and any files you see coming from Saudi nodes are merely the results of somebody getting "bitten"... Valdis Kletnieks Computer Systems Engineer Virginia Polytechnic Institute