waledac worm. one of the domains it has been using lately. http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090119 -- ------------------------------------------------------------- jose nazario, ph.d. <jose at arbor.net> manager of security research arbor networks v: (734) 821 1427 http://asert.arbor.net/