I have been getting reports from our clients (we develop Records Management and 911 software systems for county and city governments) of what sounds like a trojan or virus. It's a process called sndmon32.exe, it's killing the bandwidth and processor of all the machines and it apparently spreading, I've not seen a packet capture of what's going on, but I thought I'd pop off an email and see if anyone else has heard anything? I've googled for this process and hit every virus maker I can think of, but no luck. I know it's off topic, but I'd rather jump the gun than have it go off in my face. -------------------------------------- Mark Haney Network Administrator InterAct Public Safety Systems mhaney@xxxxxxxxxxxxxxx Fedora Core release 2 (Tettnang) Kernel: 2.6.8-1.521 GNU/Linux 16:43:20 up 9:03, 2 users, load average: 1.55, 1.67, 1.53