Here's what Symantec says about the Wscript.KakWorm. It IS an attachment so it doesn't go through the server. Wscript.KakWorm spreads using Microsoft Outlook Express. It attaches itself to all outgoing messages using the Signature feature of Outlook Express and Internet Explorer newsgroup reader. The worm utilizes a known Microsoft Outlook Express security hole so that a viral file is created on the system without having to run any attachment. Simply reading the received email message causes the virus to be placed on the system. Microsoft has patched this security hole. The patch is available at: http://www.microsoft.com/technet/ie/tools/scrpteye.asp Cheryl Rothwell LoganCty@mindspring.com