Neil,

Yes, I had the same suspicious too. We'll ask our friend. I didn't see the sequences of the virus at my home computer, though. One thing, which I noticed, IE shows 404 error more often, than usual.

I sent this virus to Tom Avery, because he woluntereed to analyze this virus. I didn't hear from him since then. May be he was the first victim :)

>Nadya,
>
> sometimes burglars break into an office and steal a load of old PCs and just throw them away. Then they wait until new PCs are delivered, and break in again. Are you sure that this second message is not another, subtler form of virus, which is getting you to damage your own system? A bit like a virus hoax which encourages you to "forward this warning to everyone you know", rapidly bringing mail systems to their knees. Ring your friend and ask if he actually sent the second message. I don't know what Files32.vxd and the registry entry actually do, but they sound pretty basic systems-ish to me.
>
>Best wishes,
>Neil