Joseph Brennan wrote: > New one to me-- a phish came in with a .arj attachment. Pretty old > format. We're going to block it, since I doubt anyone uses it this > side of the 90s. If you've still got the spample, check the content of that file. It's probably a RAR archive. I've seen RAR files with all kinds of mismatched extensions. -kgd