With thanks to Jim Eichner, the virus is confirmed. Delete the message from RPICKARD. For a complete description of the virus, see: http://vil.nai.com/vil/content/v_127423.htm Note that it spoofs the sender. Also note that the virus was discovered today, August 9. Perhaps that is why the IEEE anti-virus missed the attachment. Also, it seems that not everyone on the listserver mail list received the virus message, which may be due to local anti-virus. Good luck, and best regards, Rich