Hello, Checkout http://www.sophos.com/virusinfo/articles/greetings.html Not a virus, not spam - still a huge risk. Could someone assist me with writing a rule that triggers on "You can pick up your E-Card at the FriendGreetings.com" or similar regards, Tony ps: I'm using mailscanner 3.24-1 with spamassassin 2.43