The malware authors can't spell, so we can use that to our advantage: body MY_TROJAN6 /ticket, simply print it on a color printed/ describe MY_TROJAN6 "Airline Ticket" Trojan Dropper score MY_TROJAN6 12 Cheers, Phil -- Phil Randal Networks Engineer Herefordshire Council Hereford, UK