[jamra]

There was this interesting book by Mark Russinovich called Trojan Horse that dealt with the exact scenario. There was malware that got around the digital signature by altering the file in memory before signing and uploading to the email client.