This is a multi-part message in MIME format. ------=_NextPart_000_0089_01C296F7.1B6DBBA0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I checked the log file at /var/log/logfile and I get the following = listings: Nov 28 15:10:57 clarkconnect exim[30286]:2002-11-28 15:10:57 Start queue = run: pid=3D30286=20 the next listing I get is: Nov 28 15:10:57 clarkconnect exim[30286]:2002-11-28 15:10:57 End queue = run: pid=3D30286 This listing repeats itself over and over except that the time changes = by one hour each time.=20 I am guessing that this means that I have a behind the scenes program = running that is sending out these e-mails every hour at about 10 minutes = after the hour each time. The question I want to ask is Does anyone recognize what virus this = might be or how I can track it down? I have ran Symantec's virus scan a couple of times on my hard drive and, = after removing the bugbear virus it said I had, it now comes back saying = I have no virus. Maybe this is a new virus and Symantec cannot scan for = it yet I don't know. Anyway, again I appreciate the responses from = everyone. Later, Cliff ------=_NextPart_000_0089_01C296F7.1B6DBBA0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable