It appears that W32/Bagle-A spoofs the sender's address. You all might want to add it to your list of Silent Viruses Dustin -- Dustin Baer Unix Administrator/Postmaster Information Handling Services 15 Inverness Way East Englewood, CO 80112 303-397-2836