QAMover for Exchange 2000/2003 application can create a folder named Spam (or something else) in each Exchange mailbox and move any ingoing message that has specific attachment created by anti-virus software like Symantec Mail Security for Exchange, to that folder.
The application is an Exchange store event sink.

Benefits

• You can set up QAMover on per-mailbox basis or as "store-wide" application, i.e. it will work on each user's Inbox in the certain Exchange 2000/2003 mailbox store
• You do not heed to configure the rules on each workstation that runs Outlook
• The application is server-centric, so you do not need to install any extra software on the client side
• Even being deleted by user accidentally, Spam folder will be restored automatically when incoming message is received