In a message dated 6/2/04 5:33:43 PM Pacific Daylight Time, mreid30@xxxxxxxxx writes: Appreciate any suggestions. Murray, Trend Micro has a handle on it...... use their Housecall Description: This HTML malware is likely found hosted on a malicious site. It drops and executes the file C:\X.EXE into visiting systems. The dropped file, which is detected as TROJ_SMALL.AR, is a Trojan that downloads a specific file from a predefined site. This HTML malware affects systems running Windows 95, 98, ME, NT, 2000, and XP. Solution: Important Windows ME/XP Cleaning Instructions Running TREND MICRO Antivirus Scan your system with TREND MICRO antivirus and delete all files detected as HTML_ZEROLIN.A. To do this, TREND MICRO customers must download the latest pattern file and scan their system. Other Internet users can use HouseCall, TREND MICRO's free online virus scanner. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Education is when you read the fine print. Experience is what you get if you don't. -- Pete Seeger"