>Just a thought: maybe it's done by sending a Java app in the body. Outlook or OE might be running it to show the preview. I've set my OE in the "restricted zone", which I have set to basically do nothing! IMO, the default "restricted" setting in IE (and therefore OE) is far too much permissive.

Yes, it could be a Java app, I guess, I do have OK and OE set to Intranet Zone. But I believe I found Restricted too tight for some activities so discontinued it. Let me try attacking it from the Intranet Zone side, I've set Java to "Prompt For" there instead of enabled. If I don't receive too many pesky messageboxes in the meantime, I'll see what happens when the next one of these "UI-messages" (and that's a very descriptive term for them) hits me...

The larger concern is not just about me - these UI-messages leave me with the distinct feeling that someone up to no good could do serious damage by automatically commandeering an OS like these things appear to. I'll have to save the next one as a text file to examine, also...