Unfortunately that is not the case. Even Attachments= No can't catch this particular worm. The worm in the body is not a proper MIME attachment (although there are RFC822 MIME headers in the message). Yes, I tested it. Nathan