This is now occurring on a number of Rootsweb lists, using variations of a number of list members' addresses. The worm itself may not have actually originated with the members mentioned below. Based on the number of lists affected, my suspicion is that the problem is with the Rootsweb server or a related/connected server. Dean Sliger