Have you ever found malware, a virus or even a remote attacker connected live actually attempting to do damage on your machine. I can personally say I have only witnessed this twice, once was on a web server that I was responsible for the admin of and was a worm spreading through a remotely accessible exploit in IIS. The host had to turn off network access to all Windows servers and we had to travel to the data centre and install an MS hotfix off-line. The other was a zero day worm a corporate network caught and caused the network and mail servers to be flooded. Had 5 guys from Mcafee flying in the same day to analyse and paralyse the worm, by the end of the next day they had a working updated virus definition. On the desktop I have seen AV catching malware and viruses and even found them on machines not working correctly due to the damage caused (but the actual virus/malware no longer working), but never seen any malware OR viruses trying to do actual damage. Cheers, Nick.