Aha! The worm is using the 2k offsets and corrupts the DCOM RPC service on XP, which makes the OS automatically shut down after 1 minute. Patch up or use a firewall (or well, just tell any ignorant end users to do so) and you'll be good!
__________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html