A new version of Magistr is making the rounds. See http://www.viruslist.com/eng/default.asp?tnews=2&nview=1&id=1198&page=0 Don't know if John's sanitizer can really defend against it, though, as Magistr doesn't use fixed file names and the new version is supposedly highly polymorphic. --Brett