Dear Jeffry Bilder, Upload it here: http://virusscan.jotti.org Also the sandbox from NORMAN [1] will help you a great deal with "analysis", it tells you the IRC server, room, password and name your exe was configured to use. I met some nice poeple using that method ;) [1] http://sandbox.norman.no/live_4.html -- Thierry Zoller