>> I'm sure you'd notice it reading your httpd logs, as it's a rather long >> string of garbage. Also of note is the attempted execution of a file >> called fp30reg.dll > > I'm definetly seeing it in my logs. Yeah. I was wondering whether I should treat it as normal worm activity across the Internet, or start prosecuting people for trying to hack my ISP. ~Will