#MSExchange
Been seeing a lot of these this week, all with different senders
Microsoft Forefront Protection for Exchange Server has detected a virus.
Virus name: "Trojan-Spy.HTML.Fraud.gen"
File name: "Body of Message"
State: "Removed"
Subject line: "FW: Receipt for Your Payment to AU-AdCommerce-EOM@ebay.com"
Sender: "Jacki Seers"
Scan job: "Transport"
Thankfully 
forefront removes it!
flaphead.com 
I ran a FOPE “top virus” report for a few customers last week and this was at the top of the list.