I was subcontracted onto a large Insurance company site near Stirling and they got hit by the LoveBug.
Cue several hours of internal IT running aroun like headless chickens wondering what to do.
Only by 10am I'd had a copy, opened the .vbs in Notepad and saw it was looking for a URL - told them first thing to do would be to drop internet access to desktops - they didn't listen, after all I was only seconded to deskside support.
Made sure I documented it in an email and sent it to my onsite manager as well as my manager at my own company.
Sure enough a meeting was held post lunch and the internal security people (such as they were) tried to give me a chinning over opening an attachment.