We get those too -- they test "clean" and pass thru the A/V portion. We catch them with rules similar to yours. Along with the undeliverable mail reject messages and "you have a virus" messages from other postmasters (which is why I think it forges addresses quite a bit, since we do not have any infected machines and have not sent any out from here). Quite a few, however, now get caught with other viruses in them (but the same text as SWEN and same attachment name).
Karen > -----Original Message----- > From: John Tolmachoff > > And here, all this time, I thought it was corrupt or uncomplete > versions of > Swen. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
