Diane Poremsky [MVP] wrote...

Content-Type: text/plain; charset="GB2312" - for this chinese charset, I'd
look for GB2312 in the header.

None of the current spate of spams that I'm getting have this. Below is a sample
with some info edited out.

Return-Path:
Delivered-To:
Received: from localhost (localhost.xxx.net.au [127.0.0.1])
by mail.xxx.net.au (Postfix) with ESMTP id A236412DFA
for ; Thu, 31 Jul 2008 05:23:47 +1000 (EST)
X-Virus-Scanned: amavisd-new at xxx.net.au
X-Spam-Flag: NO
X-Spam-Sco 3.595
X-Spam-Level: ***
X-Spam-Status: No, score=3.595 tagged_above=-999 required=7
tests=[DCC_CHECK=1.37, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.509,
RCVD_IN_SORBS_DUL=1.615, RDNS_DYNAMIC=0.1]
Received: from mail.xxx.net.au ([127.0.0.1])
by localhost (mail.xxx.net.au [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id 59RYemTrTiqm for ;
Thu, 31 Jul 2008 05:23:42 +1000 (EST)
X-Greylist: delayed 00:05:02.416503 by SQLgrey-1.6.8
Received: from ptugc.arcor-ip.net (dslb-088-064-221-106.pools.arcor-ip.net
[88.64.221.106])
by mail.xxx.net.au (Postfix) with SMTP id EF4B612DE2
for ; Thu, 31 Jul 2008 05:23:41 +1000 (EST)
Date: Wed, 30 Jul 2008 19:23:40 +0000
From: "Crooked Mangen"
X-Mailer: The Bat! (3.0.9.20) Professional
Reply-To: Crooked Mangen
X-Priority: 3 (Normal)
Message-ID:
To:
Subject: )
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------62E30C9B11DF46"