On winXP and 2000, I've check that sasser and blaster target a certain port..Im not sure, but this would be the kinda thing that I;m looking for . Thanx for the URL on Trojans
Regards