[Esd-l] SWEN identifier: TO/FROM/SUBJECT

[Scott Taylor]

On Tue, 23 Sep 2003, John Downing wrote:

> 
> The uppercase TO/FROM/SUBJECT headers are NOT an "if and only if" marker 
> for the swen worm. I have quarantined email with swen attachments that have 
> both normal and all uppercase headers.

Same here.  However, the attachment always starts with "TVqQAAMAAAAEAAAA".
  
Although, I fail to see what difference it makes as John's Sanitizer rules 
pick it up every time.