Maybe this. http://securityresponse.symantec.com...ster.worm.html