Those are actually encrypted subject lines. Example: When you send an Outlook Test mail, the subject line is Microsoft Outlook Test Message.
However, when Declude sees it, it looks like =?utf-8?B?TWljcm9zb2Z0IE91dGxvb2sgVGVzdCBNZXNzYWdl?= John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Dan Star > Sent: Monday, March 10, 2003 7:57 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Removing mails by the subject > > What about mails that don't have specific subjects, but characters such a > %$(%(234_`1 ? We get a lot of these but they don't break w20 which tosses the > email. Can Pro toss these? > > Dan > > Markus Gufler wrote: > > > Hi Darryl > > > > We catch this spam message with 276% of our hold value. > > There are a lot of not content based tests that fail this message. This > > should be enough to block it. > > > > Our free tool SPAMCHK makes a lot of content based tests. I do not > > reccomend to filter this spam by the subject line "he hit me". Doing > > this ater some months you will have a long filter list containing > > numerous no longer used subject lines. > > > > This message contains a lot of keywords that you can filter for. > > Additionaly there are links to external images, and a script call. As > > you can se only our SPAMCHK gives 170% of our hold value: > > > > 09.03.2003 02:26:44, file C:\IMail\spool\D983f0cc700986457.SMD, Result > > 0H 50L 120K 0R, total 170 > > From:lisa <[EMAIL PROTECTED]> > > To:<[EMAIL PROTECTED]> > > Subject:he hit me > > 0,11 Filename is C:\IMail\spool\D983f0cc700986457.SMD > > 0,11 Read 4544 bytes from file C:\IMail\spool\D983f0cc700986457.SMD > > 0,11 Message is base64 encoded! > > 0,11 mail text contains links to external images > > (http://cmb.flyhosting4free.com/max/images/ltg.jpg) > > 0,11 mail text contains a script call > > (http://cmb.flyhosting4free.com/ltg/?aid=357594) > > 0,11 Checkwords found: h_ardcore p_enis s_lut c_heck out c_hick p_ics > > f_riend t_een s_lut y_our p_enis > > > > Markus > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of Darryl Koster > > > Sent: Sunday, March 09, 2003 7:47 PM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Declude.JunkMail] Removing mails by the subject > > > > > > > > > > > > They fail a bunch of tests on my system. I am still in the > > > set up phases though and am looking into dif. possible fixes > > > for this type of thing. Its nice to know that I can filter > > > for certain words. > > > > > > Darryl > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] Behalf Of Smart > > > Business Lists > > > Sent: Sunday, March 09, 2003 1:29 PM > > > To: Darryl Koster > > > Subject: Re: [Declude.JunkMail] Removing mails by the subject > > > > > > > > > Darryl, > > > > > > Sunday, March 9, 2003 you wrote: > > > DK> I get tons that say > > > DK> "He Hit Me" that are porn etc. > > > > > > I've seen a bunch of those recently but they've failed the > > > following tests on my system: > > > > > > OSSOFT, SPAMCOP, WIREHUB-DNSBL, DORKZTL, > > > SBL, SORBS-HTTP, CN-KR, > > > NOABUSE, NOPOSTMASTER, BADHEADERS, REVDNS, > > > SNIFFER > > > > > > > > > Terry Fritts > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
