OK here is something spooky and I can't logically explain it. On November 24th a number of emails were sent from one of out E2K boxes running SP3. They are delivered successfully and all is well. On February 4th the server is rebooted due to an error with the pagefile being exceeded. The messages from the 24th November are resent. There is no evidence of user intervention and no viruses. It appears as though one of the logs has been replayed. I am unable to come up with any logical explanation for this occurence. Please send your ideas and suggestions as this is really bugging me. Mark Shevill IMG Messaging Technical Lead Shell Information Technology International Limited Rowlandsway, Wythenshawe, Manchester M22 5SB, United Kingdom Tel: +44 161 935 7152 Fax: +44 207934 1630 Email: Mark.M.Shevill@xxxxxxxxx Internet: http://www.shell.com <http://www.shell.com/>