Dennis Budd said, in part: > So I think that rather than this worm being inadvertantly sent to the > list by an infected listowner, that it was a deliberate attempt to > infect the subscribers of the list by a malicious human being. For > the worm to do this on its own it would have had to forge the headers > itself. Or a spammer might have been infected, and Hybris used their regular 'out route.' That might cause the kind of bounce you saw. According to a New Zealand site, at least one spammer using the 'Millions' CD has been infected. Such fun....not. http://www.findit.co.nz/webhome.nsf/UNID/EEA15ED2E8617455CC2569AB00692786 Barb in Southern Indiana Zone 5/6 [log in to unmask] A root is a flower that disdains fame.