Hi, My "sender.eml" has the line: SKIPIFFORGING
And my virus.CFG has: AUTOFORGE ON FORGINGVIRUS Anonymous Driver FORGINGVIRUS Antiman FORGINGVIRUS Avril FORGINGVIRUS Bagle Yet, declude virus just sent the "sender.eml" for the following details: File: "Unknown File" Result: FoundI-Worm/Bagle Message ID: <[EMAIL PROTECTED]> Our Domain: Schmidt.AS for Schmidt.AS Queue ID: D324e01530000b795.smd Based on these headers: -----Original Message Headers----- Received: from [62.93.44.11] [62.93.44.11] by hm-software.com with ESMTP (SMTPD-9.10) id A24E331D0; Wed, 13 Dec 2006 12:03:10 -0500 Date: Wed, 13 Dec 2006 18:03:11 +0100 To: "Andy" <[EMAIL PROTECTED]> From: "Webmaster" <[EMAIL PROTECTED]> Subject: price 13-Dec-2006 Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--------oibzhbgyvnajpcxfwpdt" --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.