Hi Jim, By driving the user to what I call the dark-side web site a virus or malware can get installed just by viewing the dark-side site's hidden iframes. Sometimes, I think what you maybe seeing are tests of zombie botnet systems. Roman Roman Victor, Software Developer RVPM Designs 8 Coach Ln Amherst, MA 01002 413 253-6547 413 695-9425 cell romanvictor at rvpmdesigns.com www.rvpmdesigns.com