Junk Emails which do not require Bayes filtering to be stopped

Here's an email which we presume would be very difficult to stop on a Bayes or Vector Machine filtering algorithm but which was stopped by our unique PASSIONFRUIT library filters of which ETHFRUITSPAM is a component

From: "Gunther Francisco" Josif@gbandco.com
To: "Pepito Fraley" burke@travelfactfile.com
Subject: {Spam?} Good Phaarrmacy for you
X-www.antespam.co.uk-SpamCheck: spam, SpamAssassin (score=41.3, required 8,
     ALMOSTRUBBISH -1.00, ANONHTML 1.00, ASPACC -0.01, ASPACE -0.01,
     CHERRY3 -3.00, DELETEREMAINDER 0.01, ETHFRUITSPAM 20.00,
     HISSIONS 0.01, HTMLCODE 1.00, HTML_60_70 2.90, HTML_FONT_BIG 0.27,
     HTML_MESSAGE 0.10, HTML_TAG_EXISTS 2.00, MSGIDADDED 1.00,
     MSG_ID 2.00, NEWNEG2 0.01, NEWPIP1 0.01, NIGER1 7.00,
     ORANGE2 1.00, ORANGEER 0.01, PASSIONATE 1.00, PASSIONFRUIT 1.00,
     PIPS2 3.00, PRIORITY 1.00, SPAMESS 0.01, score 1.00)
X-www.antespam.co.uk-SpamScore: sssssssssssssssssssssssssssssssssssssssss

        "Could you be there at four?".
		"Yes."
		"Look out for who's following.  If I'm not there by four-thirty,
		don't wait.  You know why.  It will be because I think some one
		is watching.  There won't be, though, if we work it right.  And
		now you must run, sweet.  We can't use Nine-thirty-one any more.
		I'll have to rent another place somewhere else."


		Have a nice day!

Because we don't just filter on content, the following email was caught nicely with a score approaching 800 triggering our "SPAMMERABLE" filter. I love the amusing wording - it's worded deliberately to get around some filters:

Subject:   {Bad Spam?} Special Promotion - Get a Professional Mixer
From:   "Harold Booth" HaroldBooth@PRODUCTTESTERSWEWANT.INFO
Date:   Mon, February 14, 2005 22:23


We are giving you our enlightening letter because you opted in for it or you have
been a buyer on one of our scores of electronic places of business. If you want to
be disconnected from this worthy email distribution service any longer. By all means
-- Go Here.

This is an email deigned to get around standard filters but which was caught on our PASSIONFRUIT library of filters:

From: =?utf-8?q?Nannie Bddiapnd?= semipermanentlypeeg@bas-pc.com
Subject: {Bad Spam?} =?utf-8?q?Amend your spermatoz?=
X-www.antespam.co.uk-SpamCheck: spam, SpamAssassin (score=720, required 8,
     ALMOSTRUBBISH -1.00, ANTIBFORPASSIONSP 1.00, APPLEFRUITS 1.00,
     APPLEFRUITS2 5.00, APPLEPASSION1 1.00, APPLEPASSION5 1.00,
     APPLEPASSION6 1.00, APPLES3 4.00, APPLES5 2.00, APPLESA 0.01,
     APPLESB 0.01, APPLESC 0.01, APPLESD 8.00, APPLESPAMMER 60.00,
     APPLESX5 1.00, APPLESX6 1.00,
     BLOCKAPPLEFRUITSPAM 50.00, BLOCKFRUITSPAMMER 50.00,
     DELETAPPLEFRUITSPAM 70.00, DELETEREMAINDER 0.01, DIFFAPPLE1 0.01,
     DINSPECT 0.01, FORPASSIONSP 50.00, FRUITSPAMMER 60.00,
     FVGT_rbL 70.00, HEADBANG1 100.00, HTML_30_40 0.89,
     HTML_MESSAGE 0.10, LONEMEATNUMBER 80.00, MEATAPPLES 10.00,
     MSGIDADDED 1.00, MSGMTA 2.00, PASSIONATC 1.00,
     PASSIONFRUIT 1.00, REALLYXNOTHINGIN 5.00, SPAMESC 0.01,
     SPAMLONEAPPLES 80.00, UF 2.00, XNOTHINGIN 1.00, score 1.00)
X-www.antespam.co.uk-SpamScore: ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss



Our lozenges are a in a scientific way formalized herbal
nutritionary mixture to reinforce natality by amending sperm cell lineament,
count and motion.

http://personal-doc.info/

The following email is an example of the way in which spammers can take advantage of Bayes filtration and to those people who rely on Bayes systems, it's a very hard email to catch. The SpamAssassin HTML_IMAGE_ONLY_04 designation cannot normally be assigned a high score as it would produce considerable number of false positives. However, for us, the interception of this and other types of exception email are easy to pick up. Amongst our unique FRUIT sorting filters our APPLES filter scoring 20 caught this email even despite a false identification of PRODUCT with a -27 score. We have developed very unique libraries of enhancements for standard SpamAssassin and other conventional filters which overcome their limitations as well as the shortcomings of Bayesian systems.

Message-ID: 48ADE46DB555$1AEB609B$79270c37@hideakifan.com
From: "Florinda Milburn" mackupton@hideakifan.com
Subject: {Spam?} Pro-Forma Invoice attached
X-www.antespam.co.uk-SpamCheck: spam, SpamAssassin (score=19.8, required 8,
     ALMOSTREALSPAM 5.00, ALMOSTRUBBISH -1.00, APPLES5 2.00,
     APPLES6 10.00, APPLES9 1.00, APPLESB 0.01, APPLESC 0.01,
     APPLESX4 5.00, APPLESX5 1.00, APPLESX6 1.00, ASPACC -0.01,
     ASPACE -0.01, DELETEREMAINDER 0.01, DIFFAPPLE1 0.01, HTML_40_50 1.06,
     HTML_IMAGE_ONLY_04 8.60, HTML_MESSAGE 0.10, IMAGEONLY 8.00,
     MAILTO_LINK 1.00, MIME_HTML_ONLY 1.00, PRODUCT -27.00, TF 2.00,
     score 1.00)
X-www.antespam.co.uk-SpamScore: sssssssssssssssssss

Page river, though ran settle dance. Through led, view half

course. Less front, grand full. Face, our has vary surface open.

More choose, size ago. Name settle more wash. Be wish shape,

ever cell fill. Instrument, planet result their object. Noon

differ length more end, might. Shape, more it.

--

Phone: 943-582-7829

Mobile: 496-417-9453

Email: mackupton@hideakifan.com

Attachments:

gospels3.gif  1.4 k

Here's another email designed to evade Bayesian filters . . . but we stopped it! It's also an interesting email as it is one sent out by a zombie computer programmed by a virus to cause email DOS attacks against servers. These emails are sent out in their millions to random addresses that don't exist and merely clock up networks. They are sent out on the assumption that someone will read them somewhere but these sort of emails hammer servers, cause sites to have to use more servers to cope with ordinary functions and lead to excess power consumption and global warming. (Query: what is the total global power consumption of the whole internet?)

Return-Path: ldvroxww@team2it.com
X-ClientAddr: 60.222.50.70
X-MID: 1761656453.26197@tifaq.com
Date: Tue, 22 Feb 2005 22:38:25 -0500
Message-Id: 1761656453.26197@tifaq.com
From: Aron Meyers ldvroxww@team2it.com
Subject: {Bad Spam?} Accupril - Used to treat high blood pressure and heart failure bowser
X-www.antespam.co.uk-SpamCheck: spam, SpamAssassin (score=777.7, required 8,
     ABSOLUTERUBBISH 2.00, ALMOSTALLRUBBISH 1.00, ALMOSTRUBBISH -1.00,
     APPLEPASSION5 1.00, APPLES2 2.00, APPLES5 2.00, APPLES6 10.00,
     APPLES7a 2.00, APPLES7b 7.00, APPLES9 1.00, APPLESA 0.01,
     APPLESB 0.01, APPLESC 0.01, APPLESD 8.00, APPLESX4 5.00,
     APPLESX5 1.00, APPLESX6 1.00, APPLESX8 41.00, APPLESY1 26.00,
     APPLESY2 26.00, APPLESZ1 19.00, APPLESZ4 19.00, APPLESZ5 1.00,
     ASPACC -0.01, BLOCKERA 70.00, BLOCKEXTRA 110.00, BLOCKPLUS 130.00,
     CHERRY3 -3.00, COMBINATION4 10.00, COMBINATION5 50.00,
     COMBINATIONL4 33.00, COMBINATIONY4 10.00, COMPLETERUBBISH 1.00,
     COUNTAPPLES5 5.00, DELETABLE 1.00, DELETEAFTER 20.01,
     DELETENEXT 20.01, DELETENOW 40.01, DELETEREMAINDER 0.01,
     DIFFAPPLE1 0.01, DINSPECT 0.01, ENGLISHSENDER -10.00,
     HTML_00_10 1.21, HTML_MESSAGE 0.10, INSPECT3 0.01, LETTOMETER 35.00,
     MILDBAST3 30.00, BADCR 1.00, BAD_NEBREK 0.50,
     NEARLYALLRUBBISH 1.00, NEWNEG2 0.01, NEWNEG3 9.00, NEWPIP1 0.01,
     NEWPIP2 0.01, NIGER2a 2.00, ONFIVON 2.00, ONWIFEONZ 1.00,
     ORANGE2 1.00, ORANGE3 3.00, ORANGE4 2.00, ORANGEATER 0.01,
     ORANGEER 0.01, PINGSPAM1 0.10, PIPS1 2.00, PIPS2 3.00, PIPSX1 2.00,
     PROBM1 20.00, SHORTRUB -0.01, TOMATO10 -0.10, TOMATO4b 0.01,
     TOMATO5b 0.01, TOMATO7 -0.10, TOMATOX 0.01, score 1.00)
X-www.antespam.co.uk-SpamScore: ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss

Yes; for Mark was at ease about Sara—not quite at ease about the past, for a certain
burning of the ears would come whenever he thought of the scenes with Bill last
August, but at ease about her present lot. Mr. Irwine, who had been a regular
correspondent, telling him all the news about the old places and people, had sent
him word nearly three months ago that Bill Bede was not to marry Mary Burge, as he
had thought, but pretty Sara Sorrel. Martin Poyser and Bill himself had both told
Mr. Irwine all about it— that Bill had been deeply in love with Sara these two
years, and that now it was agreed they were to be married in March. That stalwart
rogue Bill was more susceptible than the rector had thought; it was really quite an
idyllic love affair; and if it had not been too long to tell in a letter, he would
have liked to describe to Mark the blushing looks and the simple strong words with
which the fine honest fellow told his secret. He knew Mark would like to hear that
Bill !
had this sort of happiness in prospect.

Attachments:

untitled-[1.2]  2.8 k   [ text/html ]    download  |  view
Jupj.GIF  8.6 k   [ image/gif ]    download  |  view

[html text]

replied: Quite true, dear Mother; and if you will show me the

[viagra cialis soma valium image content here]

Mark wanted to go home without saying any more—he was too painfully
embarrassed in mind, as well as too weak in body, to wish for any
further explanation to-night. And yet it was a relief to him that
Bill reopened the subject in a way the least difficult for him to
answer. Mark was in the wretched position of an open, generous man
who has committed an error which makes deception seem a necessity.
The native impulse to give truth in return for truth, to meet trust
with frank confession, must be suppressed, and duty was becoming a
question of tactics. His deed was reacting upon him—was already
governing him tyrannously and forcing him into a course that jarred
with his habitual feelings. The only aim that seemed admissible to
him now was to deceive Bill to the utmost: to make Bill think better
of him than he deserved. And when he heard the words of honest
retractation—when he heard the sad appeal with which Bill ended—
he was obliged to rejoice in the remains of ignorant confid! ence
it implied. He did not answer immediately, for he had to be judicious
and not truthful.

Sara looked up at him and smiled through her tears, as she had done
to Mark that first evening in the wood, when she had thought he was
not coming, and yet he came. It was a feebler relief, a feebler triumph
she felt now, but the great dark eyes and the sweet lips were as beautiful
as ever, perhaps more beautiful, for there was a more luxuriant womanliness
about Sara of late. Bill could hardly believe in the happiness of that moment.

His right hand held her left, and he pressed her arm close against his
heart as he leaned down towards her.

Finrod bypassed conversation in favor of lunch. Tourmaline showed
Pope_751 exact location, continuous movement and distance relationship
will embrace these two facts, not regret them. A newspaper press Eventually
though, we did get back in gear, and walked out to the car, which
Only one of these spells can be effective in a single encounter. Repeated
critters. Wanderer showed me his lovely abode, a nine foot square cardboard
given it. He called them to his bedside and said, My sons, from counter to
tail, and a man went along to groom me; and now I women collected round a
well, talking and laughing. Look Attorney Lawrence Gentile III, who served
MacDougall with a subpoena to appear The Bramble answered: 'You poor creature,
if you would only call not develop the technical skills to communicate in
the new

Here's the new version of the cheating wives spam. The spammers are trying to convert the spam to something that tries to look like ham but our PASSIONFRUIT filters PHAZORED it without needing adjustment.

Return-Path: 
X-ClientAddr: 211.227.105.228
Received: from cantillon.demon.co.uk ([211.227.105.228])
Message-ID: AJGGIGGKPCDOGFGGJOPICHEIALAB.d_d_staffordgd@arved.de
From: "Demetrius D. Stafford" d_d_staffordgd@arved.de
Subject: {Spam?} other people in your area that want to cheat
X-www.antespam.co.uk-SpamCheck: spam, SpamAssassin (score=27.5, required 8,
     ALMOSTRUBBISH -1.00, ASPACC -0.01, ASPACE -0.01, ASSURD 1.00,
     BASE64_ENC_TEXT 5.50, BASSURD1 5.00, BODY_WORDS 7.50,
     CHERRY4 -18.00, CHERRY5 -19.00, CHERRYY2 -30.00,
     DELETEREMAINDER 0.01, HTML_10_20 1.36, HTML_MESSAGE 0.10,
     INSPECT2 0.01, MIME_HTML_ONLY 1.00, MSGID_GOOD_EXCHANGE -5.00,
     NEWCH2a -2.00, NEWNEG2 0.01, NEWPIP1 0.01, ORANGE2 1.00,
     ORANGEER 0.01, OUTCHERRY2 30.00, OUTCHEVAL 30.00, OUTNUMBER 1.00,
     OUTPHAZE 1.00, PASSIONATC 1.00, PASSIONATE 1.00, PASSIONFRUIT 1.00,
     PIPS2 3.00, PROBPLUS -10.00, SPAMMERFRUITS 1.00, WIDOWER 20.00,
     score 1.00)
X-www.antespam.co.uk-SpamScore: sssssssssssssssssssssssssss

Hello, come to the world's largest adlullt datti1ng place.  You're going to find
people here that are looking for just about everything.  Wives that need to find
secret people to hook up with.  People that are looking for alternative lifestyle
type things.  Women that want to try aye null ex.  Women that want to be
domininiatted by men and so on.  Have a look it's absolutely noo coossst to you to
check it out and you get it for three days at one buckaroo.

Here's one where they have obscured words to avoid detection and it got OUTPHAZORED on little more than a RECIPE of MEAT and APPLES

Return-Path: tqhtctt@comcast.net
X-ClientAddr: 67.166.244.170
Received: from c-67-166-244-170.client.comcast.net (c-67-166-244-170.client.comcast.net [67.166.244.170])
Received: from gateway-s.comcast.net by c-67-166-244-170.client.comcast.net [67.166.244.170]
Received: from 141.177.30.153 by c-67-166-244-170.client.comcast.net ([67.166.244.170]) with HTTP; Mon, 07 Feb 2005 17:29:58 -0600
Received: (qmail 16319 invoked by uid 218); Mon, 07 Feb 2005 17:30:51 -0600
Message-ID: 89550464019067.72351.qmail@67.166.244.170
Subject: {Bad Spam?} Re: Re: Agreement Information
From: "Delacruz" tqhtctt@comcast.net
X-www.antespam.co.uk-SpamCheck: spam, SpamAssassin (score=637.5, required 8,
     ALMOSTRUBBISH -1.00, ANTIBFORPASSIONSP 1.00, APPLEFRUITS 1.00,
     APPLEFRUITS2 5.00, APPLEPASSION1 1.00, APPLEPASSION3 1.00,
     APPLEPASSION6 1.00, APPLES4 4.00, APPLES9 1.00, APPLESA 0.01,
     APPLESC 0.01, APPLESPAMMER 60.00, ASPACC -0.01, ASPACE -0.01,
     BODY_CONTAINS_VALIUM 2.00, COMCAST -7.00, COMCASTER 7.00,
     DAZZLING 300.00, DELETEREMAINDER 0.01, DIFFAPPLE1 0.01,
     FORPASSIONSP 50.00, HIGHERWHITE -30.00, HIGHWHITE -30.00,
     HTML_20_30 1.16, HTML_MESSAGE 0.10, LONEMEATNUMBER 80.00,
     MEATAPPLES 10.00, MIME_HTML_ONLY 1.00, NEWPIP1 0.01, NOTHINGIN 20.00,
     OUTPHAZORED 66.00, PEARTOT 1.00, RECIPE1 4.00, SARE_IP 0.22,
     SINGLE 1.00, TEDIOUS 85.00, XNOTHINGIN 1.00, score 1.00)
X-www.antespam.co.uk-SpamScore: ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss

How have you been? I have very exciting news!

We FINALLY were able to save an extra $450 a month

We refinaxnced our mortgqage with a 3.75

and closing was fast and we got several low offers within

days. You can apply also at
this site



Hope you do good with money over the coming year





Delacruz

With sophistication beyond any other anti-spam system we check incoming email for over 10,000 criteria to give the best possible accuracy

CONTACT US

Unsurpassed Spam blocking for any email address published on a webpage. Monitored spam-bin minimises risks of losing wanted emails. Don't trust services where you do not know what mails you are losing! Don't trust anti-spam software which has to be downloaded onto your computer.

EMAIL BEFORE SPAM - ANTE-SPAM!

We aim to stop spam without stopping your business. If you don't have the services of an antispam spam blocking system, you are likely to waste hours per day in due course, viewing and deleting spam. The headache you will have, together with the speed at which you have to delete hundreds of emails, will mean that you delete your wanted emails by mistake. We block them before they get to you and we do so in a careful manner unlike any other anti-spam service.
Many anti-spam spam remedy services are crude and are capable of losing valuable business communications. Many people say "I don't need it - I have installed Product X on my computer" . . . but the reality is that if your existing solution is going to be effective for you, you'll have to waste thousands of hours re-inventing the wheel. Is your time you'll waste worth less than £70 per year?

In contrast to one-solution-fits all software you install on your machine or worse, buy from an ISP, we tailor our spam remedy service to the needs of our individual clients and our results benefit from years of research. You do not need to download software on your computer: we block the spam at our server.

ORDERING THE SERVICE

How much? Just £70 per year ($130 or 110EU) per address protected. Discounts for multiple addresses. Pay with Paypal, cheque or bank transfer.
We do the work to help you get on with your work.

If you want to buy maintained filter service to run on your version of SpamAssassin, please enquire: guide £4000 to £30,000 depending on the size of your organisation. They can save you this in problems your server will encounter running Bayes and large databases - and is much more accurate!
CONTACT US