Hi, According to the changes file, it seems that the MICROSOFT_EXECUTABLE rule has been removed in spamassassin 3.0. ------------------------------------------------------------------------ r6504 | felicity | 2004-02-05 04:08:59 +0000 (Thu, 05 Feb 2004) | 1 line remove MICROSOFT_EXECUTABLE ------------------------------------------------------------------------ This rule detected 99.9% of spam delivered to my account. Has it been replaced by another rule? Juan -- Please avoid sending me Word or PowerPoint attachments. See http://www.fsf.org/philosophy/no-word-attachments.html