hi all, currently some of our web server internally running iis 5.x where been hit by this so called worm virus and yes, server patches, installation procedure is being deployed to the local administrator to put an end to this problem and though i'm planning to trace it out from it's root - any idea's? i will really appreciate it. again, thanks in advance. regards, don