I've seen one Trojan that matches this - W32/Calypso-tr (aka BKDR_CALYPS.A). http://www.fortinet.com/FortiResponseCenter/ (see W32/Calypso-tr) http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_CALYPS. A Regards, Patrick Nolan Virus Researcher - Fortinet