Is there any possibility that Outlook or Exchange is putting it there? (Unless you have SpamBayes and the Outlook filter use different folders for spam, you may not be able to tell.)