Dan, I think the malware that hit the Yahoo! groups was in fact a JavaScript exploit. Didn't touch any disks, you're right. Apparently did create some email floods.
Drop Files