I appreciate your detailed reply.
Like I said in my original message, I do not really understand what the
software is doing, but I assume that for it to make this kind of change,
that it is taking the message apart, scanning its pieces (the message
and the attachments), then putting it back together again. Wouldn't it
be much better to return the message exactly as-is if the message does
not contain any viruses?