Not entirely up to date on the virus since I don't get a lot of them.. 4 in the last 8 years or so. But Klex might have been "evolved" to spoof the header too If a new version is out and about. Not entirely hard to do for the right programmer who likes to cause problems. Anythings possible any more.