I have just received an email that bypassed the scanner, because it contains a double-zipped file (I assume). It is an executable (masquerading as a screen-saver), inside a zipfile, which is inside another zipfile (or the same name). I will forward a copy to John for analysis. Simon