> -----Original Message-----
> From: Ricardo Kleemann
> Sent: Sunday, December 28, 2003 9:56 AM
[...]
> I've placed a tarball at:
>
> www.americasnet.com/spam_samples/spam_samples.tgz
>
> If anyone would be kind enough to take a look and give me
> some pointers on how I could improve my SA configuration to
> catch these messages, I'd greatly appreciate it. I get a few
> of these every day, they're consistently scored low, and
> running them through sa-learn doesn't seem to do much.
I gave it a shot using my collection of rules, most of them downloaded
from the Rules Emporium, and ended up with 22 spams and 8 non-spams
(false negatives). All of the false negatives followed the same format.
They contained a multipart/alternative attachment, for which the text
part contained several long paragraphs of innocuous material that looked
like it was excerpted from an online novel, that sort of thing. Each
message appeared to have different text. The second part of the attachment
used HTML and that's where the spammer placed his links to promote low, low
mortgages and such. I've attached one of the examples, with the SA report
attached to it.
The rules I'm using are summarized in this message, posted a week ago:
http://marc.theaimsgroup.com/?l=spamassassin-talk&m=107208777030291&w=3
>From [EMAIL PROTECTED] Sun Dec 28 14:06:32 2003
Delivered-To: [EMAIL PROTECTED]
Return-Path: <[EMAIL PROTECTED]>
Received: from mx91.exptd.us (mx91.exptd.us [::ffff:216.17.82.91])
by mail1.americasnet.com with esmtp; Thu, 25 Dec 2003 14:26:49 -0800
From: "Amber Green" <[EMAIL PROTECTED]>
To: "M Kleemann Ricardo" <[EMAIL PROTECTED]>
Subject: Kleemann Ricardo Family: Loan Registration Memorandum
Date: Thu, 25 Dec 2003 16:26:03 -0600
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="=_server2-30976-1072391215-0001-2"
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
screamer
X-Spam-Level: ***
X-Spam-Status: No, hits=3.3 required=5.0 tests=BAYES_50,BIZ_TLD,
FVGT_u_BIZ_SITE,FVGT_u_DOM_END_NUM,HTML_MESSAGE,HTML_WEB_BUGS,
MY_DOT_BIZ autolearn=no version=2.61
This is a MIME-formatted message. If you see this text it means that your
E-mail software does not support MIME-formatted messages.
--=_server2-30976-1072391215-0001-2
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
In addition to the mentioned medical treatments of bipolar disorder, there are several
other options available to bipolar patients, most of which are used in conjunction
with medicine. One such treatment is light therapy. One study compared the response to
light therapy of bipolar patients with that of unipolar patients. Patients were free
of psychotropic and hypnotic medications for at least one
month before treatment. Bipolar patients in this study showed an average of 90.3%
improvement in their depressive symptoms, with no incidence of mania or hypomania.
They all continued to use light therapy, and all showed a sustained positive response
at a three month follow-up (Hopkins and Gelenberg, 1994). Another study involved a
four week treatment of bright morning light treatment for
patients with seasonal affective disorder and bipolar patients. This study found a
statistically significant decrement in depressive symptoms, with the maximum
antidepressant effect of light not being reached until week four (Baur, Kurtz, Rubin,
and Markus, 1994). Hypomanic symptoms were experienced by 36% of bipolar patients in
this study. Predominant hypomanic symptoms included racing thoughts,
deceased sleep and irritability. Surprisingly, one-third of controls also developed
symptoms such as those mentioned above. Regardless of the explanation of the emergence
of hypomanic symptoms in undiagnosed controls, it is evident from this study that
light treatment may be associated with the observed symptoms. Based on the results,
careful professional monitoring during light treatment is
necessary, even for those without a history of major mood disorders.
Another popular treatment for bipolar disorder is electro-convulsive shock therapy.
ECT is the preferred treatment for severely manic pregnant patients and patients who
are homicidal, psychotic, catatonic, medically compromised, or severely suicidal. In
one study, researchers found marked improvement in 78% of patients treated with ECT,
compared to 62% of patients treated only with lithium and
37% of patients who received neither, ECT or lithium (Black et al., 1987).
A final type of therapy that I found is outpatient group psychotherapy. According to
Dr. John Graves, spokesperson for The National Depressive and Manic Depressive
Association has called attention to the value of support groups, and challenged mental
health professionals to take a more serious look at group therapy for the bipolar
population.
Research shows that group participation may help increase lithium compliance, decrease
denial regarding the illness, and increase awareness of both external and internal
stress factors leading to manic and depressive episodes. Group therapy for patients
with bipolar disorders responds to the need for support and reinforcement of
medication management, and the need for education and support for
the interpersonal difficulties that arise during the course of the disorder.
Hamlet is a play written by William Shakespeare that very
closely follows the dramatic conventions of revenge in Elizabethan
theater. All revenge tragedies originally stemmed from the Greeks, who
wrote and performed the first plays. After the Greeks came Seneca who
was very influential to all Elizabethan tragedy writers. Seneca who
was Roman, basically set all of the ideas and the norms for all
revenge play writers in the Renaissance era including William
Shakespeare. The two most famous English revenge tragedies written in
the Elizabethan era were Hamlet, written by Shakespeare and The
Spanish Tragedy, written by Thomas Kyd. These two plays used mostly
all of the Elizabethan conventions for revenge tragedies in their
plays. Hamlet especially incorporated all revenge conventions in one
way or another, which truly made Hamlet a typical revenge play.
--=_server2-30976-1072391215-0001-2
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
<html>
<head>
</head>
<body bgcolor=3D"#ffffff" link=3D"#CC0000" vlink=3D"#CC0000" alink=3D"#CC=
0000" leftmargin=3D"0" topmargin=3D"0" marginwidth=3D"0" marginheight=3D"=
0">
<table width=3D"500" border=3D"0" align=3D"center" cellpadding=3D"0" cell=
spacing=3D"0">
<tr>=20
<td><p><font size=3D"2" face=3D"Arial, Helvetica, sans-serif">-------=
-------------------------------------------------------------------------=
---------------------------------------------<strong><br>
</strong>American Refinance Group<br>
-----------------------------------------------------------------=
------------------------------------------------------------<br>
M, </font></p>
<font size=3D"2"> =20
</font>
<p><font size=3D"2" face=3D"Arial, Helvetica, sans-serif">As of mid=
night, The=20
Kleemann Ricardo family residence at: 184 S. Idaho St La Habra, C=
a,=20
90631 Us is Pre-Qualified for points from 4.1% - 5.2%*
30 YR Fixed.</font></p>
<font size=3D"2"><p><font size=3D"2" face=3D"Arial, Helvetica, sans=
-serif">No
out of pocket closing costs; Easy qualifier – Slow or non=
e payment
history OK; Maximum cashout for any reason; 4 out of 5 people a=
ccepted
in most cases.</font></p>
</font><font size=3D"2"> </font>
<p><font size=3D"2" face=3D"Arial, Helvetica, sans-serif"><a href=3D"http=
://minute.opt-u1.biz/cgi-bin/index.php?index=3Damerican/index.html&index_=
perc=3D50&index2=3Damerican/index2.html&index2_perc=3D50&host=3Dd&site_id=
=3D032&tracking%5Fid=3D122203%5Fmort%5Ffull&zip%5Fcode=3DUs&lname=3DKleem=
ann+Ricardo&project%5Ftracking%5Fid=3D697&subject%5Ftracking%5Fid=3D6351&=
machine%5Ftracking%5Fid=3D%7B166B2CA0%2DD968%2D49F4%2DB0F3%2DD9A241799AA1=
%7D&fname=3DM&ad%5Ftracking%5Fid=3D8136&email=3Dricardo%40americasnet.com=
&state=3D90631&sententious=3DThings&city=3DCa&address=3D184+S.+Idaho+St+L=
a+Habra">Follow
This Link Now
For a 1 Minute Quick Quote.</a></font></p>
<font size=3D"2"><p><font size=3D"2" face=3D"Arial, Helvetica, sans=
-serif">Thank You,<br>
<br>
Amber Green<br>
American Refinance Group</font></p>
</font></td>
</tr>
</table>
<img src=3D"http://images.opt-u1.biz/cgi-bin/pimage.asp?site_id=3D032&em=
ail=3Dricardo%40americasnet.com&flow=3Dnostrum&zip%5Fcode=3DUs&fname=3DM&=
city=3DCa&subject%5Ftracking%5Fid=3D6351&lname=3DKleemann+Ricardo&machine=
%5Ftracking%5Fid=3D%7B166B2CA0%2DD968%2D49F4%2DB0F3%2DD9A241799AA1%7D&sta=
te=3D90631&cavort=3Dhoudspear&project%5Ftracking%5Fid=3D697&ad%5Ftracking=
%5Fid=3D8136&tracking%5Fid=3D122203%5Fmort%5Ffull&address=3D184+S.+Idaho+=
St+La+Habra" height=3D"1" width=3D"1">
<!--footer-->
<p> </p>
<table width=3D"492" border=3D"0" align=3D"center" cellpadding=3D"0" cell=
spacing=3D"0">
<tr>=20
<td width=3D"492"> <p><img src=3Dhttp://images.opt-u1.biz/images/out_=
6.gif width=3D353 height=3D43 border=3D0 usemap=3D#Map><br><img src=3D"ht=
tp://images.opt-u1.biz/images/mort_disc.gif" width=3D"508" height=3D"18"=20=
border=3D"0">
<map name=3D"Map">
<area shape=3D"rect" coords=3D"296,2,345,15" href=3D"http://min=
ute.opt-u1.biz/cgi-bin/index.php?index=3Damerican_newsletter.html&skip_pr=
oject_changes=3Dtrue&projectID=3Dmort&host=3Dd&site_id=3D032&fname=3DM&ad=
%5Ftracking%5Fid=3D8136&city=3DCa&tracking%5Fid=3D122203%5Fmort%5Ffull&zi=
p%5Fcode=3DUs&lname=3DKleemann+Ricardo&subject%5Ftracking%5Fid=3D6351&Hel=
l=3Dgrinsic&email=3Dricardo%40americasnet.com&machine%5Ftracking%5Fid=3D%=
7B166B2CA0%2DD968%2D49F4%2DB0F3%2DD9A241799AA1%7D&project%5Ftracking%5Fid=
=3D697&state=3D90631&address=3D184+S.+Idaho+St+La+Habra&Hogmanay=3Dervate=
">
</map>
</p> </td>
</tr>
</table>
<p> </p>
</body>
</html>
--=_server2-30976-1072391215-0001-2--
Spam detection software, running on the system "screamer", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: This is a MIME-formatted message. If you see this text
it means that your E-mail software does not support MIME-formatted
messages. In addition to the mentioned medical treatments of bipolar
disorder, there are several other options available to bipolar
patients, most of which are used in conjunction with medicine. One such
treatment is light therapy. One study compared the response to light
therapy of bipolar patients with that of unipolar patients. Patients
were free of psychotropic and hypnotic medications for at least one
month before treatment. Bipolar patients in this study showed an
average of 90.3% improvement in their depressive symptoms, with no
incidence of mania or hypomania. They all continued to use light
therapy, and all showed a sustained positive response at a three month
follow-up (Hopkins and Gelenberg, 1994). Another study involved a four
week treatment of bright morning light treatment for patients with
seasonal affective disorder and bipolar patients. This study found a
statistically significant decrement in depressive symptoms, with the
maximum antidepressant effect of light not being reached until week
four (Baur, Kurtz, Rubin, and Markus, 1994). Hypomanic symptoms were
experienced by 36% of bipolar patients in this study. Predominant
hypomanic symptoms included racing thoughts, deceased sleep and
irritability. Surprisingly, one-third of controls also developed
symptoms such as those mentioned above. Regardless of the explanation
of the emergence of hypomanic symptoms in undiagnosed controls, it is
evident from this study that light treatment may be associated with the
observed symptoms. Based on the results, careful professional
monitoring during light treatment is necessary, even for those without
a history of major mood disorders. Another popular treatment for
bipolar disorder is electro-convulsive shock therapy. ECT is the
preferred treatment for severely manic pregnant patients and patients
who are homicidal, psychotic, catatonic, medically compromised, or
severely suicidal. In one study, researchers found marked improvement
in 78% of patients treated with ECT, compared to 62% of patients
treated only with lithium [...]
Content analysis details: (3.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.3 HTML_WEB_BUGS BODY: Image tag intended to identify you
0.1 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 50 to 56%
[score: 0.5097]
1.4 FVGT_u_BIZ_SITE URI: FVGT - contains a URL in the BIZ top-level domain
1.0 FVGT_u_DOM_END_NUM URI: FVGT - domain name ends with numbers
0.1 BIZ_TLD URI: Contains a URL in the BIZ top-level domain
0.3 MY_DOT_BIZ URI: A .biz found in url.
