Please don't follow this up onlist but in view of the sheer number of these things I'm getting , and the bogus MS connection, felt I should wave the red flag. Symantec/Norton AV; THREAT: CATEGORY: 3 W32.Swen.A @mm is a mass-mailing worm that also attempts to spread through file-sharing networks, such as KaZaA and IRC, and will attempt to de-activate antivirus and personal firewall programs running on the computer. The worm can arrive as an email attachment. The subject, body, and From: address of the email may vary. Some examples claim to be patches for Microsoft Internet Explorer, or delivery failure notices from qmail. This worm exploits a vulnerability in Microsoft Outlook and Outlook Express in an attempt to execute itself when you open or even preview the message. Information and a patch for the vulnerability can be found at http://www.microsoft.com/technet/security/bulletin/MS01-020.asp Gareth List administrator for DYFED, CGN & PEM Genuki Wales http://www.genuki.org.uk/big/wal/ Lookup Exchange http://home.clara.net/tirbach/lookup.html Help Page http://home.clara.net/tirbach/hicks.html .