> This virus is sent as plain text, but has a SMTP command *inside* that > text (begin 666) which causes Outlook (on the recipient's side) to > assume this is an attachment, and separates out the bytes into a > attachment file, which is the actual virus executable. Sounds to me as though the file is a uuencoded "attachment". uuencoding is done inline with the message body. The uuencoding scheme is designed to translate all characters into 7-bit text and is considered plain text even though it isn't readable until decoded. Most mail systems will find this and treat it as an attachment. "BEGIN nnn" is indicator that a uuencoded file will be found betweent the BEGIN and END markers. Terry A. Moore Sr. I/S Tech Specialist The Timken Company ********************************************************************** This message and any attachments are intended for the individual or entity named above. If you are not the intended recipient, please do not read, copy, use or disclose this communication to others; also please notify the sender by replying to this message, and then delete it from your system. The Timken Company **********************************************************************