right click, properties, details, select all, copy...back to incoming...forward...paste into top of message....find the () or [()] addresses, copy, paste into Domain Dossier or CentralOps, find source, copy abuse@ address, paste to top of e-mail forward...and always send to your provider's abuse reporting address for their filter updating.
Everybody did that every time, the filters would be so tight we would have nothing squeak by.
But:
Depending on your OS and EMP, some times you can't just hit "block" when the Junior High School Kids who send this stuff learn a new way in Computer Science Class to get around your program.
Look at e-mail properties. It should tell you where it came from, maybe a good @ to use.