This simple procmail recipe can be easily installed into linux or unix system using procmail, to block all emails with attachments ending in any of these suffixes: .vbs, .wsf, .vbe, .wsh, .hta, .scr, .pif, .com, .exe, .shs, .bat, .bas, .scr, .eml, .dll You may edit the line beginning with "ATTACH=" and the line beginning with "* name=" to remove or add suffixes. After you edit it as necessary, do the following (as root): # touch /var/log/virus.log # mkdir /home/antivirus # touch /home/antivirus/virus.save Then to install and start the recipe, do the following: # cp -p /etc/procmailrc /etc/procmailrc.BACKUP (the above line may give you an error messsage if you don't already have an /etc/procmailrc file; but if you do have one, it'll create a backup for you in case you've made any mistakes) and # cat ./etc/procmailrc > /etc/procmailrc That's it. Your recipe is installed and working. And will restart whenever you restart your system. If you don't feel comfortable installing it, please contact nobaloney.net; we can do the install for us$50 per system. But it's easy to do it yourself. http://www.nobaloney.net/contactus.html