Thanks for the advise Jonathan I was just concerned that if it tried to call the outlook.exe file then I'd be stuffed :-) The email is already deleted off my mail server - the only reason I was concerned is that the attachment when viewed on the mail server seemed to be rather larger than just a file saying "this email had a virus" but seemed to be the original size (or thereabouts) of the infected payload. I haven't had a chance to look at the headers yet as I was reluctant to do too much with this possible payload - most of my friends have easily identifiable isps too! I'll have a play tonight.....I could always ghost my pc, unplug my modem and try but that sounds like a bit too much of an effort!
Andy ________________________________________________________ Current Ver: 1.60i FAQ : http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Bug Reports: https://bt.ritlabs.com