Thanks every one.. I see that I really need to tweak my SA, I am not using many of its features evidently.. I never saw any rule that would mark a mail because ClamAV found a virus attached.. I can;t find anywhere this RCVD_FORGED_WROTE rule either.. that alone would have made a huge difference and gotten rid of it, almost every one I get is scored at 4.0 or higher
My personal SA is set to 4.9 and I have Eudora filter any score over 4.0 to its own mailbox so I can see what's going on.. almost every one of these end up in there..
