Here, apparently, is what happened: This individual, arnie sher samson <arnysher@bellatlantic.net>, signed onto MDOsprey a few days ago, stayed for a day, then signed off the list. It was only after the person signed off that the message came through with the attached virus file. This message was NOT sent to the list (it doesn't show up in the MDOSprey Archive) so it would appear that this person downloaded the subscriber list then dummied up a message to all of us made to look as if it came from the list, thus, I suppose, attempting to allay our fears. I have complained vigorously to postmaster@bellatlantic.net and I would urge every one of you to do the same. After this weekend I will explore methods of hiding the subscriber list. The MDOsprey list is not moderated. That means that any subscriber can post any message (within reason) to the list or can, at present, look at the subscriber list. There is no automatic method for scanning submissions to the list (as one subscriber suggested), especially since this message was NOT sent through the list. Just be cautious about ANY message you receive with attachments, especially if it comes to you from someone you don't know and trust. =============== Norm Saunders Colesville, MD osprey@ari.net