Thanks in advance for any help. We are running Exchange 5.5, and we are blocking vbs, exe, eml, and the like at the server. However. When one of our outside agents gets hit with Sircam, we get an instantaneous flood (the whole address book) of these emails, and the server isn't fast enough to delete all of the attachments as they go through, so sometimes a Sircam infected email will sit in a user's inbox for a few minutes before its attachment is deleted. Sorry if this is a basic question, but are there any other changes that can be made at the server level that anyone knows of? Any help would be well appreciated. Andrew Blevins