>http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SADHOU N >D.A&VSect=T
It looks like just being a matter of time before mass-mailers start using it, but I'm not sure how to go about blocking them. The description at http://www.messagelabs.com/viruseye/report.asp?id=130 suggests that there's more to it than just "blah.htm.exe.htm" but doesn't go into details about exactly what to look for (hardly surprising, we're supposed to pay them to look for it). Evan
