Hi, On Tue, Jun 09, 2009 at 03:24:11PM -0600, Smith, Donald wrote: > Dirk, your "unique bot ID" appears to be windows host names is that correct? yes, the first part of the ZeuS unique bot ID is the windows host name -- Tom Fischer BFK edv-consulting GmbH tel: +49 721 962 01-1 Kriegsstr. 100, D-76133 Karlsruhe fax: +49 721 962 01-99