Hello Manuel, >>> I didn't send any pif files, just plain text with a NOD32 virus report in >>> it. >> Yes, but the text 'document_word.pif" was in your message, wasn't it? > > No, Tonys message didn't have a file *.pif in its message, nor was its > content pasted in the message.
I know, but the text (letters) 'document_word.pif' were in his message, He included the whole NOD32 report which was: ,----- [ In <mid:[EMAIL PROTECTED]> Tony wrote:] | This part was removed because it was infected. | Anti-virus reports: | Win32/Netsky.D worm | | The original part header follows: | | Content-Type: application/octet-stream; | name="document_word.pif" | Content-Transfer-Encoding: base64 | Content-Disposition: attachment; | filename="document_word.pif" `----- Now, does that text contain the words/letters "document_word.pif" in it, or not? It is actually a copy of the message headers that some ISPs look at for possible spam or viruses. That's what I am saying. That probably that's what Ian's ISP virus scanning saw and flagged Tony's message as infected. -- Best regards, Miguel A. Urech (El Escorial - Spain) Using The Bat! v3.5 on Windows 2000 5.0 Service Pack 4 ________________________________________________________ Current beta is (none) | 'Using TBBETA' information: http://www.silverstones.com/thebat/TBUDLInfo.html IMPORTANT: To register as a Beta tester, use this link first - http://www.ritlabs.com/en/partners/testers/

