Argh! 2nd instance of fake Windows Genuine Advantage Notificationhttp://msmvps.com/blogs/donna/archive/2006/06/29/103242.aspxOne earlier and now there's 2nd ... it's at Daniweb 's forum (Thanks to Microsoft MVP Robear Dyer for the link). The bad file is faking Microsoft's Windows Genuine Advantage Notification and Validation Tools. As you can see on earlier (the first reportenCommunityServer 2008.5 SP2 (Build: 40407.4157)W32.Cuebot-K worm appears as Microsoft antipiracy programhttp://msmvps.com/blogs/donna/archive/2006/06/29/103242.aspx#103428Fri, 30 Jun 2006 19:10:40 GMTd67277c4-116b-43f1-b688-e9ef184ea916:103428Donna's SecurityFlashThe fake Windows Genuine Advantage Tool (wgavn.exe) has been named as W32.Cuebot-K worm by Sophos. <br>...<img src="http://msmvps.com/aggbug.aspx?PostID=103428" width="1" height="1">