any idea why this pass thru SA
Well, first, that message is not spam, it's a virus. It's the result of a newer mail worm/virus called the swen worm.
SpamAssassin sometimes tags viruses, but that's not it's job in life. It's job is to identify spam and takes a "there's tons of virus scanners out there, use one of those to pick up viruses" approach. It's not trained, tuned, or tweaked to try to identify viruses, but in general if SA tags a virus it's not viewed as bad, just an unintentional added benefit.
With regards to your report however, in the future please don't copy-paste the text part of an email and ask us why it didn't hit. By copy-pasting only the text portions of the message many critical parts of the email that SA examines are lost, making it impossible for anyone to draw any conclusions about the message.
You also didn't say what version of SA, or anything about your setup (bayes enabled? awl enabled? is razor installed?, etc). Including some configuration information, at least a version, is helpful when asking this kind of question.
At the very least, give us a x-spam-status header line, however the best thing to do (if you can) is to attach the complete original message as a file, complete with headers and all original mime and html encoding.
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
