You are so right about WSH. WSH is great. Outlook is the problem. The other problem is that Windows encourages users to run with full administrative privileges. If the user is reading email for a restricted user account, the viruses will only be able to execute with the privileges of that user.