I regularly receive messages for this group with proper-looking titles and all (Such as "Subject: cctech Digest, Vol 3, Issue 15" ) Am I alone? Whatever is generating these things is fairly clever to even change the subject line to resemble the rising issue numbers of the current volume. It makes me wonder if it is in the "cctech Digest" server. I have never investigated what the removed content looks like to determine if something is being incorrectly identified as a virus. Bob ------------------ Virus Warning Message (on ******) Security warning Exceed_Decompression_Layer in file email-body The file email-body is moved to /etc/iscan/virus/virGhMU1y. Information from **** Mail-Server: Scanner detected a virus (Exceed_Decompression_Layer) in an attachment (email-body) of this message. The attachment was removed from the message. No further action is required on your part. If you have questions, please contact postmaster@********* --------------------------------------------------------- ------------------ Virus Warning Message (on *******) email-body is removed from here because it contains a virus. ---------------------------------------------------------