I don't know what the brouhaha is all about. People have been doing this for *years* now, using hotmail and juno and the like. And everytime aol upgrades or patches to stop these "pass word stealers" someone vb programmer finds a way around it, and immediatly hundreds of people have access to it. By the very nature of it, you have to give people the file for it to work. Then anybody can simply hex their email address in place of the original. I guess someone finally noticed.