This worm uses variable subjects and attachment names, as well as some extensions (such as .exe) that may not be practical to block. Anyone have a signature? --Brett