If you open the headers all the way, it appears to me the list server itself is the infected machine, though headers can be forged. Asa Jay Quoting mikeldrew at aol.com: > Here is my icq list. > > +++ Attachment: No Virus found > +++ Panda AntiVirus - www.pandasoftware.com > >