I learn something new everyday and this one is worth passing on: My virus scan says I'm clean now because I deleted out and rebnamed. The wom does attach to e-mail as well. Removing the kak worm When the worm has been detected, the use should delete the following files, if they exist: c:\windows/kak.htm c:\ windows\Sustem\ (filename).hta (where (filename) is a varible, and it changes from one system to another. c:\windows\start Menu\Programs\Startup\kak.hta The "autoexe.bat" file can be retores by renaming "C\AE.KAK' to C:\autoexe.bat. Kak uses a known security hole in Microsoft Outlook Express to create the local HTA file. for further instructions go to http://www.datafellows.com/v-descs/kak.htm Jean