In message <017001c26e2b$a5ab20e0$d246e4d4@336870j>, Glenys Marriott <glenys@bishopdale.demon.co.uk> writes >I am at a loss to understand how it has culled my name, and a message I sent >weeks ago to my own group, but with a different email address. As usual, >my Norton is updated every single day, and although I have received dozens >of virus this last 2 weeks, I have not opened any of them, and my system is >clean. Anyone who reads this group will have a list of all contributors in his or her address book. When the virus strikes one of those readers' machines, it lifts an address from the address book at random, takes a header from an incoming mail message, and sends of the message to the address, along with the virus. However it also uses another address from the address book as the source, so the two names on the message are both those of innocent bystanders. John -- John Rouse, searching for PARR and TINDILL in Yorkshire.