Bruce,
Here's a cut & paste of an actual spam message containing the word
"PHARMACY". Note the nonsense letters on the right.
------------------------------------------------------------------------------------------------------------------
Hi
QUIT O l VERPA o YIN j G FOR YO o UR PH e ARM z AC h Y
S x AV n E up z to 5 i 0 % wi p th
http://www.stoaswiu.com
------------------------------------------------------------------------------------------------------------------
Now here's what came up on the message source. It appears the letters on the
right were actually interspersed with the original message to mung it up,
and then disassociated from the message to yield a "clean" copy by using
some clever style sheet antics. If you've seen this tactic before, I
apologize for repeating it.
------------------------------------------------------------------------------------------------------------------
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C6D730.22D62760
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi
=20
QUIT O l VERPA o YIN j G FOR YO o UR PH e ARM z AC h Y
=20
S x AV n E up z to 5 i 0 % wi p th
http://www.stoaswiu.com
------=_NextPart_000_0001_01C6D730.22D62760
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"
HTMLHEAD
META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii"
META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR
STYLE/STYLE
/HEAD
BODY bgColor=3D#ffffff
DIVHi/DIV
DIV /DIV
DIVQUIT Ospan STYLE =3D"border: 0px; float : right ; " l =
/spanVERPAspan STYLE =3D"border: 0px; float : right ; " o =
/spanYINspan STYLE =3D"border: 0px; float : right ; " j /spanG =
FOR YOspan STYLE =3D"border: 0px; float : right ; " o /spanUR =
PHspan STYLE =3D"border: 0px; float : right ; " e /spanARMspan =
STYLE =3D"border: 0px; float : right ; " z /spanACspan STYLE =
=3D"border: 0px; float : right ; " h /spanY/DIV
DIV /DIV
DIVSspan STYLE =3D"border: 0px; float : right ; " x =
/spanAVspan STYLE =3D"border: 0px; float : right ; " n /spanE =
up span STYLE =3D"border: 0px; float : right ; " z /spanto 5span =
STYLE =3D"border: 0px; float : right ; " i /span0 % wispan STYLE =
=3D"border: 0px; float : right ; " p /spanth A =
href=3D"http://www.stoaswiu.com"http://www.stoaswiu.com/A/DIV/BODY=
/HTML
------=_NextPart_000_0001_01C6D730.22D62760--
------------------------------------------------------------------------------------------------------------------
Interesting. Diabolical. F***ing B*st*rds!
Roy
"Bruce Hagen" wrote in message
...
Ctrl+F3 will show you the message source. You'll have to search a bit.
This is from a message I had that was Mult-part containing HTML and
regular text.
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
HTML xmlns:eXclaimer=3D"http://www.exclaimer.co.uk" =
xmlns:msxsl=3D"urn:schemas-microsoft-com:xslt" =
xmlns:exc=3D"http://www.exclaimer.co.uk/rtf"
HEAD
META http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3DUTF-16"
You should see a similar view.
--
Bruce Hagen
MS-MVP Outlook Express
~IB-CA~
"C. Roy Blye" wrote in message
. ..
Thanks Bruce - Looks like I need to do a little "homework." I will say,
though, that the offending messages look exactly like ordinary text to
me. Is there another way to tell if the word is in an HTML section?
Roy
"Bruce Hagen" wrote in message
...
If the word is in an HTML section of the message, the rule won't see it.
That is the spams that look like a small poster rather than just
ordinary text.
Some Message Rule Ideas:
http://www.mindspring.com/~majik/messagerules.htm
Some tips:
http://insideoe.tomsterdam.com/tips/rules.htm
Message Rules not working?:
http://www.tomsterdam.com/insideoe/faqs/why.htm#rules
--
Bruce Hagen
MS-MVP Outlook Express
~IB-CA~
"C. Roy Blye" wrote in message
. ..
Hello,
I get approximately 6.23 x 10^23 spams every day with the word
"PHARMACY" in the body text, so being a smart guy, I created a message
rule to kick those messages into the Delete folder. Problem is, it
hasn't been working. To make matters more mysterious, when I send
MYSELF a test message with the word "pharmacy" in the body text, it
winds up in the delete folder as it should.
Anybody know what gives?
Thanks,
Roy