Looks like McAfee has provided an "extra.dat" file which allows the virus to be detected as W32/Mimail at MM (ED). Options presented to uvscan don't seem to affect it one way or the other. I still wonder if we need that --mime option. Does anyone have a case where a virus isn't detected by MS without it? Thanks, Rich B