We had a similar e-mail worm at work this week. Our software stripped it, but it was actually a pretty smart way to try and get people to open it. The first round, you just got an e-mail with an attachment that said it had a password, but they were nice enough to give you the password for it. Of course, you click on the attachment and you're infected. Next round of messages, the e-mail sender addresses now had our domain with the usernames of "admin", "administration" and "staff" and messages that looked like the user needed to run the attachment to protect them from the viruses/worms going around. Sneaky little [censored for delicate ears]. -=>Donald