Who is <edick(a)idcomm.com>? S/he/it appears to have Klez on their computer, and CLASSICCMP <CLASSICCMP(a)trailing-edge.com> is one of the bogus return addresses that it is affixing to its outgoing crap. Probably putting MINE on some, also! PLEASE, download and run the Klez removal tool from Symantec at: http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.to… It sure is nice to run PINE on a shell account - total immunity to all of the Outhouse crap. -- Grumpy Ol' Fred