I had a user infected with this. She confessed to opening in a link in one of those bogus CNN/MSNBC update mails and installing the "antivirus" software. It was quite easy to get rid of it "by hand" (I'm sorry, I don't remember exactly what I did by now); perhaps John is looking at a more nasty variant. -- Kim Geiger Information Technologist Broadcasting Services Michigan State University 517-432-3120 x 429