This little tid-bit raises a number of questions. Just wondering how the bad-guy finds the infected computers? 1) For a file like that to reach out and touch him, initiating contact from the infected side, does it not have to contain the contact info (IP# or somesuch) for the evil doer? (and if so, I presume some talented sleuth here will find it). 2)When Zone Alarm issues an alert that an app is trying to act as a server or even access the net, doesn't it also give the addy that the app is trying to reach? (I use ZA also, but just don't recall) 3) Or, would he have to go around randomly pinging computers until he gets a response from an infected host? Even if he logged IP numbers from the downloads, I would presume few of us have a static number. And, if this was done maliciously, is such an act legal (in the US)? I guess I just don't get it. Obviously no criminal mastermind at work here. Sounds like a very inefficient way to hack & too easy to get caught red-handed.