Two legitimate emails came tonight from two of my wifes students both were in html format and tried to run scripts luckily Thunderbird isn't so careless with scripts as M$ mail programs --- common factor was both had MSWord .doc attachments.
Virus scan reveal nothing but I suspect this is a new Kak like worm trying to spread,

[Edited on 19/5/05 by britishtrident]