One of my major clients got hit with either the nimda or WTC.EXE virus yesterday - - they aren't sure which one yet. A couple of interesting things it does is change files from filename dot extension to filename comma extension all over the place, and changes ie.exe to ie. exe putting a space between the dot and the exe so the file won't be found. Their network is down and they keep re-infecting themselves as the virus pops up on another work station. Sometimes it reappears on a workstation that has been cleaned. Joe
