More than 2.4 million emails containing the trojan-downloader Win32.small.cfg were sent to U.K. businesses late Sunday night before the anti-virus community could react, an IT security firm warned today.