You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Carnegie, Martin" <Ma...@atcoitek.com> on 2005/02/04 17:52:44 UTC

new spam

Hi all,

I seem to be getting some new spam that includes the content in an
attached .html file.  here is the header information.

Microsoft Mail Internet Headers Version 2.0
Received: from removed ([xxx.xxx.xxx.xx]) by removed with Microsoft
SMTPSVC(5.0.2195.6713);
	 Fri, 4 Feb 2005 09:40:59 -0700
Received: from removed ([xxx.xxx.xxx.xx]) by removed with Microsoft
SMTPSVC(5.0.2195.6713);
	 Fri, 4 Feb 2005 09:40:58 -0700
Received: from removed ([xxx.xxx.x.xxx]) by removed with Microsoft
SMTPSVC(5.0.2195.6713);
	 Fri, 4 Feb 2005 09:40:59 -0700
Received: from removed ([xxx.xxx.x.xxx])
 by removed (SMSSMTP 4.0.0.59) with SMTP id M2005020409405529699
 for <re...@atcoelectric.com>; Fri, 04 Feb 2005 09:40:55 -0700
Received: from cp288973-a.dbsch1.nb.home.nl ([84.27.139.62]
helo=localhost)
	by removed with smtp (Exim )
	for removed@atcoelectric.com
	id 1Cx6Tq-0006QY-LZ; Fri, 04 Feb 2005 09:40:55 -0700
Message-ID: <40...@whnhfcdo.com>
From: "Adler Sarah"<ne...@yahoo.com>
To: <re...@atcoelectric.com>
Reply-To: "Adler Sarah"<ne...@yahoo.com>
Subject: 75% Off for All New Software.
Date: vr, 04 feb 2005 17:38:22 +0100
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.2730.2
X-Sender: "Adler Sarah"<ne...@yahoo.com>
Content-Type: multipart/mixed;
 boundary="------------13UGM806244KL7"
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on
atcoinss.atco.ca
X-Spam-Level: **
X-Spam-Status: No, score=2.8 required=5.0 tests=FORGED_YAHOO_RCVD,
	INVALID_DATE,MIME_MISSING_BOUNDARY,RCVD_IN_SORBS_DUL 
	autolearn=disabled version=3.0.1
Return-Path: nehemias@yahoo.com
X-OriginalArrivalTime: 04 Feb 2005 16:40:59.0072 (UTC)
FILETIME=[4E2D1C00:01C50AD8]

--------------13UGM806244KL7
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

--------------13UGM806244KL7
Content-Type: text/html; name="message.html"
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="message.html"

As this is from Outlook I have not quite figured out what information is
required, so hopefully this is everything that is needed.