Hi, Looks like yoe have met one of the most complex viruses around. If you check the information provided at http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.gen@xxxxxxx you will see that even uninfected computers can be in the "From:" line of the message. At Norton Web site, there's also a removal tool for this virus, you may want to download this and check all your users. To prevent such issues, always keep your antivirus' virus definitions up-to-date. Hope this helps, ILKER