From: jeff 

We've started getting rejects on a bunch of e-mails that have a domain
encoded in them in such a way that it looks like an executable file
attachment to our message_check regexp filter in Postfix -

The domain is www.5iantlavalamp.com

Go ahead - go there. You get redirected here:
http://office.microsoft.com/en-us/marketplace/EY010504821033.aspx
Smart Tags Overview

nwhois says (and yes, this is odd):

Registrant:
Microsoft Corporation (CZFXUCUVQD)
    One Microsoft Way
    Redmond, WA 98052
    US

    Domain Name: 5IANTLAVALAMP.COM

    Administrative Contact:
       Microsoft Corporation  (38381017O)
domains{at}microsoft.com
       One Microsoft Way
       Redmond, WA 98052
       US
       425-882-8080

    Technical Contact:
       Network Solutions, LLC.  (HOST-ORG)
customerservice{at}networksolutions.com
       13200 Woodland Park Drive
       Herndon, VA 20171-3025
       US
       1-888-642-9675 fax: 571-434-4620

    Record expires on 20-Aug-2007.
    Record created on 20-Aug-2004.
    Database last updated on 20-Oct-2004 13:22:23 EDT.

    Domain servers in listed order:

    NS67.WORLDNIC.COM            216.168.225.207
    NS68.WORLDNIC.COM            216.168.225.208

Message text that triggers spam/virus filter: (from
http://lists.extension.umn.edu/pipermail/parentsforever/2004-September.txt)




http://www.5iantlavalamp.com/"/>


Discussion of what is apparently causing this:

http://use.perl.org/~Purdy/journal/20877

"...we found it to be generated from users that have the option set in
Outlook to use Microsoft Word as their email editor along with smart tag
options turned on in Microsoft Word. "

My comment:
Apparently this is also seen in a _lot_ of YahooGroups/Mail stuff as well.
Terrific job Microsoft - you've come up with a "feature" that is
going to make it just that much harder to block executable files in e-mail.

--- BBBS/NT v4.01 Flag-5