That had to have been a 'false positive'. There were no attachments, no embedded HTML. Nothing but raw text in the body of the email. However, what BruceS writes makes sense. I wonder if we had used SLAGAInfo @ geostl.com instead of info @ geostl.com whether it would still have keyed on the 'info' piece. > From: Michele Perrin <mperrin2@xxxxxxxxxxxxxx> >Date: Tue, 13 Sep 2005 14:25:00 -0500 (GMT-05:00) > > Did someone send an e-mail blast about the upcoming > fall picnic? Because I got a message from earthlink > that said it was quarantined for containing a virus.