Hi The traffic I have seen is originated from Windows workstations, so I guess it is not this worm... Arie