By the way, my rscs filter stopped a copy of XMAS EXEC. Yes, it is back. I voicemailed the systems programmer on the system from where it came. For those who dont know, the XMAS exec runs on vm machines, the person executes it, it draws a christmas tree, and scans your directory for all the email addresses it can find, sending them each a copy. sigh, jr (john riehl)