Ernyoka, the emails are NOT being sent out from my site so no, it is not a virus. A spammer has changed his header to give my site a reply addy. He is using MS exchange. I have the exact version number now. The emails are NOT originating from my site or my computer. I am only getting the mailer daemons because the recipients reply to the sender (which is an altered header to make it look like my site). Someone elsewhere is doing this. The owner of art101 has responded to my IM and although he is on a deadline, he said he would call and sent some helpful info. AOL has now blacklisted me. Several smaller ISP's have too. I cannot fork out the bucks or time to fix this. Annsartgallery will close soon. I will leave it open for a short while to try and track this person. However, I do need to spend my weekends renewing several aviation certificates that are hard to come by and I do have a day job. I'm sorry, but I do not have the money or knowledge to be able to analyze the headers of the emails to track the culprit. If someone here wants to analyze this, I'll be glad to zip all the mailer returns and send them.