On Tue, 30 Mar 2004, Tomasz Kojm wrote:
> The spam is encoded into an ASCII array, something like:
>
> earthling = new Array(252,
> 177,106,210,160,139,71,177,228,121,83...
>
> and there's a simple decoder. I'm not familiar with anti-spam software
> but I was told it should catch this type of spam.

Thanks for the info.

I did a little Googling around and found some semi-interesting stuff:
http://www.rickconner.net/spamweb/analysis05.html
http://www.dslreports.com/forum/remark,9447687~mode=flat
http://www.mumbai-central.com/nukkad/mar2004/msg00176.html

Even though these particular messages are simply spam and not dangerous,
isn't there the capacity for these things to be nastier?

Although, I suppose at that point, you could simply add signatures to deal
with those cases...

Is there any legitimate reason to use this kind of trick?  Might be worth
it to have the option to block these things on principle, similar to the
way all encrypted zips can be blocked.

Jeffrey Moskot
System Administrator
[EMAIL PROTECTED]


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to