Ryan Wheaton writes: > full SOBIG /See the attached file for details/i This may be too general. You may want a rawbody instead of full. This will let you look at the Content-Type or other parts of the body. I don't have a pattern handy for you, sorry. BTW, we're getting hit hard with this virus, too. Rob