Its been there for a while but since it was causing no harm I thought it would stop soon... I am going to update my server to drop the packets and clean up the log...just found a note about it on the web...Its being used to cleanup msblast and is set to self delete in 2004....M$ OS again!! Aahh well we live in hope... Thanks, Colin.