Spam Filter Does Not Work

R

rob

I am getting spam that says:
------
Want to know how to save over 60% on your pills?
http://www.stinservice.com - Successfull and Proven Way to SAVE YOUR
MONEY.

VIAGRA CIALIS VALIUM and many other.

Best PRICES.
High Quality.
Worldwide Shipping.
Total confidentiality
250.000+ satisfied customers.

Have a nice day!
------

A simple key word filter did not work. Some of the reason for that is
that:

1) The letters of "VIAGRA CIALIS VALIUM" are put into table cells so
they can't be parsed.
2) In "pills" they use a capital I for one of the l's.
3) In "MONEY" they use the number 0 for the letter O.
etc.

What I do not understand is how they hide some of the other stuff. The
puzzling thing is that when I paste the whole message in notepad I get
the following:

----
Want to know how to save over 60% on your pi ironing Ils?

http://www.stinserv simpleminded ice.com - Successful condensation l
and Proven Way to SAVE YOU beautician R M0NEY.

nominalism V soaring AG undertenant AL preach lU
dimity l peristyle RA C stover l alveoli IS V omnipresence AL drumhead
M and many other.


Best PR pillory lCES.
High QuaI babble ity.
Worl stodgy dwide SHlPPlNG.
Total c rapidfire onfidentiaIity.
250. bottommost 000+ satisfied customers.

Have a nice gammoning day!
----

What are all these additional words in this text and why don't they
show up in the actual message? Any ideas are appreciated. BTW, in case
it help bellow is the email pasted into Microsoft Word, stored as HTML
and then opened in Notepad.

Regards,
Rob


<html xmlns:blush:="urn:schemas-microsoft-com:blush:ffice:blush:ffice"
xmlns:w="urn:schemas-microsoft-com:blush:ffice:word"
xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html;
charset=windows-1252">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List
href="Want%20to%20know%20how%20to%20save%20over%2060_files/filelist.xml">
<title> </title>
<!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Author>.</o:Author>
<o:LastAuthor>.</o:LastAuthor>
<o:Revision>2</o:Revision>
<o:TotalTime>27</o:TotalTime>
<o:Created>2005-07-18T21:06:00Z</o:Created>
<o:LastSaved>2005-07-18T21:06:00Z</o:LastSaved>
<o:pages>1</o:pages>
<o:Words>88</o:Words>
<o:Characters>508</o:Characters>
<o:Lines>4</o:Lines>
<o:paragraphs>1</o:paragraphs>
<o:CharactersWithSpaces>595</o:CharactersWithSpaces>
<o:Version>11.6360</o:Version>
</o:DocumentProperties>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:punctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;
mso-font-alt:"\FF2D\FF33 \660E\671D";
mso-font-charset:128;
mso-generic-font-family:roman;
mso-font-format:blush:ther;
mso-font-pitch:fixed;
mso-font-signature:1 134676480 16 0 131072 0;}
@font-face
{font-family:"\@MS Mincho";
panose-1:0 0 0 0 0 0 0 0 0 0;
mso-font-charset:128;
mso-generic-font-family:roman;
mso-font-format:blush:ther;
mso-font-pitch:fixed;
mso-font-signature:1 134676480 16 0 131072 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
h1
{mso-style-next:Normal;
margin-top:.25in;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:.5in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:1;
mso-list:l0 level1 lfo3;
tab-stops:list .5in;
font-size:18.0pt;
mso-bidi-font-size:16.0pt;
font-family:Arial;
mso-fareast-font-family:"MS Mincho";
mso-font-kerning:16.0pt;}
h2
{mso-style-next:Normal;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:1.0in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:2;
mso-list:l0 level2 lfo3;
tab-stops:list 1.0in;
font-size:16.0pt;
mso-bidi-font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"MS Mincho";
mso-bidi-font-weight:normal;}
h3
{mso-style-next:Normal;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:1.5in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:3;
mso-list:l0 level3 lfo3;
tab-stops:list 1.5in;
font-size:14.0pt;
mso-bidi-font-size:10.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"MS Mincho";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:370300769;
mso-list-template-ids:-1460472312;}
@list l0:level1
{mso-level-style-link:"Heading 1";
mso-level-text:%1;
mso-level-tab-stop:.3in;
mso-level-number-position:left;
margin-left:.3in;
text-indent:-.3in;}
@list l0:level2
{mso-level-style-link:"Heading 2";
mso-level-text:"%1\.%2";
mso-level-tab-stop:.4in;
mso-level-number-position:left;
margin-left:.4in;
text-indent:-.4in;}
@list l0:level3
{mso-level-style-link:"Heading 3";
mso-level-text:"%1\.%2\.%3";
mso-level-tab-stop:.5in;
mso-level-number-position:left;
margin-left:.5in;
text-indent:-.5in;}
@list l0:level4
{mso-level-text:"%1\.%2\.%3\.%4";
mso-level-tab-stop:.6in;
mso-level-number-position:left;
margin-left:.6in;
text-indent:-.6in;}
@list l0:level5
{mso-level-text:"%1\.%2\.%3\.%4\.%5";
mso-level-tab-stop:.7in;
mso-level-number-position:left;
margin-left:.7in;
text-indent:-.7in;}
@list l0:level6
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6";
mso-level-tab-stop:.8in;
mso-level-number-position:left;
margin-left:.8in;
text-indent:-.8in;}
@list l0:level7
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7";
mso-level-tab-stop:.9in;
mso-level-number-position:left;
margin-left:.9in;
text-indent:-.9in;}
@list l0:level8
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8";
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
margin-left:1.0in;
text-indent:-1.0in;}
@list l0:level9
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8\.%9";
mso-level-tab-stop:1.1in;
mso-level-number-position:left;
margin-left:1.1in;
text-indent:-1.1in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>

<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>

<div class=Section1>

<p class=MsoNormal>&nbsp;</p>

<p class=MsoNormal><span style='font-family:Arial'>Want to know how to
save
over 60% on your <span class=SpellE>pi<span
style='display:none;mso-hide:all'>
ironing </span><span class=GramE>Ils</span></span>?</span></p>

<p class=MsoNormal>&nbsp;</p>

<p class=MsoNormal><span style='font-family:Arial'><a
href="http://www.tnhoy.stinservice.com"
title="http://www.tnhoy.stinservice.com">http://www.stinserv<span
style='display:none;mso-hide:all'> simpleminded </span>ice.com</a> -
<span
class=SpellE>Successful<span style='display:none;mso-hide:all'>
condensation </span>l</span>
and Proven Way to SAVE YOU<span style='display:none;mso-hide:all'>
beautician </span>R
M0NEY.</span></p>

<p class=MsoNormal>&nbsp;</p>

<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0
style='mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
<tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'>
<td rowspan=2 valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>nominalism </span><span
style='font-size:13.5pt;
font-family:Arial'>V</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
</td>
<td rowspan=2 valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>soaring </span><span
style='font-size:13.5pt;
font-family:Arial'>AG</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
</td>
<td rowspan=2 valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>undertenant </span><span
style='font-size:13.5pt;
font-family:Arial'>AL</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
</td>
<td rowspan=2 valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>preach </span><span class=SpellE><span
style='font-size:13.5pt;font-family:Arial'>lU</span></span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
</td>
</tr>
<tr style='mso-yfti-irow:1;mso-yfti-lastrow:yes'>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>dimity </span><span
style='font-size:13.5pt;
font-family:Arial'>l</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>peristyle </span><span
style='font-size:13.5pt;
font-family:Arial'>RA&nbsp;<span class=SpellE>C<span
style='display:none;
mso-hide:all'> stover </span>l</span></span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>alveoli </span><span
style='font-size:13.5pt;
font-family:Arial'>IS&nbsp;V<span style='display:none;mso-hide:all'>
omnipresence </span>AL</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>drumhead </span><span
style='font-size:13.5pt;
font-family:Arial'>M</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span
style='font-size:13.5pt;font-family:Arial'>&nbsp;<span
class=GramE>and</span>&nbsp;many&nbsp;other.</span></p>
</td>
</tr>
</table>

<p class=MsoNormal>&nbsp;</p>

<p class=MsoNormal><span style='font-family:Arial'>Best <span
class=SpellE>PR<span
style='display:none;mso-hide:all'> pillory
</span>lCES</span>.</span></p>

<p class=MsoNormal><span class=GramE><span
style='font-family:Arial'>High <span
class=SpellE>QuaI<span style='display:none;mso-hide:all'> babble
</span>ity</span>.</span></span></p>

<p class=MsoNormal><span class=GramE><span
style='font-family:Arial'>Worl<span
style='display:none;mso-hide:all'> stodgy </span>dwide <span
class=SpellE>SHlPPlNG</span>.</span></span></p>

<p class=MsoNormal><span class=GramE><span
style='font-family:Arial'>Total <span
class=SpellE>c<span style='display:none;mso-hide:all'> rapidfire
</span>onfidentiaIity</span>.</span></span></p>

<p class=MsoNormal><span style='font-family:Arial'>250<span
class=GramE>.</span><span
style='display:none;mso-hide:all'> bottommost </span>000+ satisfied
customers.</span></p>

<p class=MsoNormal>&nbsp;</p>

<p class=MsoNormal><span style='font-family:Arial'>Have a nice <span
style='display:none;mso-hide:all'>gammoning </span>day!</span></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

</div>

</body>

</html>
 
G

Guest

That's how they get around filters. Just block everything from that domain by
adding to blocked senders lits: stinservice.com

rob said:
I am getting spam that says:
------
Want to know how to save over 60% on your pills?
http://www.stinservice.com - Successfull and Proven Way to SAVE YOUR
MONEY.

VIAGRA CIALIS VALIUM and many other.

Best PRICES.
High Quality.
Worldwide Shipping.
Total confidentiality
250.000+ satisfied customers.

Have a nice day!
------

A simple key word filter did not work. Some of the reason for that is
that:

1) The letters of "VIAGRA CIALIS VALIUM" are put into table cells so
they can't be parsed.
2) In "pills" they use a capital I for one of the l's.
3) In "MONEY" they use the number 0 for the letter O.
etc.

What I do not understand is how they hide some of the other stuff. The
puzzling thing is that when I paste the whole message in notepad I get
the following:

----
Want to know how to save over 60% on your pi ironing Ils?

http://www.stinserv simpleminded ice.com - Successful condensation l
and Proven Way to SAVE YOU beautician R M0NEY.

nominalism V soaring AG undertenant AL preach lU
dimity l peristyle RA C stover l alveoli IS V omnipresence AL drumhead
M and many other.


Best PR pillory lCES.
High QuaI babble ity.
Worl stodgy dwide SHlPPlNG.
Total c rapidfire onfidentiaIity.
250. bottommost 000+ satisfied customers.

Have a nice gammoning day!
----

What are all these additional words in this text and why don't they
show up in the actual message? Any ideas are appreciated. BTW, in case
it help bellow is the email pasted into Microsoft Word, stored as HTML
and then opened in Notepad.

Regards,
Rob


<html xmlns:blush:="urn:schemas-microsoft-com:blush:ffice:blush:ffice"
xmlns:w="urn:schemas-microsoft-com:blush:ffice:word"
xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html;
charset=windows-1252">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List
href="Want%20to%20know%20how%20to%20save%20over%2060_files/filelist.xml">
<title> </title>
<!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Author>.</o:Author>
<o:LastAuthor>.</o:LastAuthor>
<o:Revision>2</o:Revision>
<o:TotalTime>27</o:TotalTime>
<o:Created>2005-07-18T21:06:00Z</o:Created>
<o:LastSaved>2005-07-18T21:06:00Z</o:LastSaved>
<o:pages>1</o:pages>
<o:Words>88</o:Words>
<o:Characters>508</o:Characters>
<o:Lines>4</o:Lines>
<o:paragraphs>1</o:paragraphs>
<o:CharactersWithSpaces>595</o:CharactersWithSpaces>
<o:Version>11.6360</o:Version>
</o:DocumentProperties>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:punctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;
mso-font-alt:"\FF2D\FF33 \660E\671D";
mso-font-charset:128;
mso-generic-font-family:roman;
mso-font-format:blush:ther;
mso-font-pitch:fixed;
mso-font-signature:1 134676480 16 0 131072 0;}
@font-face
{font-family:"\@MS Mincho";
panose-1:0 0 0 0 0 0 0 0 0 0;
mso-font-charset:128;
mso-generic-font-family:roman;
mso-font-format:blush:ther;
mso-font-pitch:fixed;
mso-font-signature:1 134676480 16 0 131072 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
h1
{mso-style-next:Normal;
margin-top:.25in;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:.5in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:1;
mso-list:l0 level1 lfo3;
tab-stops:list .5in;
font-size:18.0pt;
mso-bidi-font-size:16.0pt;
font-family:Arial;
mso-fareast-font-family:"MS Mincho";
mso-font-kerning:16.0pt;}
h2
{mso-style-next:Normal;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:1.0in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:2;
mso-list:l0 level2 lfo3;
tab-stops:list 1.0in;
font-size:16.0pt;
mso-bidi-font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"MS Mincho";
mso-bidi-font-weight:normal;}
h3
{mso-style-next:Normal;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:1.5in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:3;
mso-list:l0 level3 lfo3;
tab-stops:list 1.5in;
font-size:14.0pt;
mso-bidi-font-size:10.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"MS Mincho";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:370300769;
mso-list-template-ids:-1460472312;}
@list l0:level1
{mso-level-style-link:"Heading 1";
mso-level-text:%1;
mso-level-tab-stop:.3in;
mso-level-number-position:left;
margin-left:.3in;
text-indent:-.3in;}
@list l0:level2
{mso-level-style-link:"Heading 2";
mso-level-text:"%1\.%2";
mso-level-tab-stop:.4in;
mso-level-number-position:left;
margin-left:.4in;
text-indent:-.4in;}
@list l0:level3
{mso-level-style-link:"Heading 3";
mso-level-text:"%1\.%2\.%3";
mso-level-tab-stop:.5in;
mso-level-number-position:left;
margin-left:.5in;
text-indent:-.5in;}
@list l0:level4
{mso-level-text:"%1\.%2\.%3\.%4";
mso-level-tab-stop:.6in;
mso-level-number-position:left;
margin-left:.6in;
text-indent:-.6in;}
@list l0:level5
{mso-level-text:"%1\.%2\.%3\.%4\.%5";
mso-level-tab-stop:.7in;
mso-level-number-position:left;
margin-left:.7in;
text-indent:-.7in;}
@list l0:level6
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6";
mso-level-tab-stop:.8in;
mso-level-number-position:left;
margin-left:.8in;
text-indent:-.8in;}
@list l0:level7
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7";
mso-level-tab-stop:.9in;
mso-level-number-position:left;
margin-left:.9in;
text-indent:-.9in;}
@list l0:level8
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8";
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
margin-left:1.0in;
text-indent:-1.0in;}
@list l0:level9
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8\.%9";
mso-level-tab-stop:1.1in;
mso-level-number-position:left;
margin-left:1.1in;
text-indent:-1.1in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>
Click to expand...
 
R

rob

Mary,

Thanks for the answer. Adding the domain doesn't help much because that
is always changing, too. In any case, this is about the only spam
message I get once a day so it's not too bad. What I really would like
to know how they do it. As mentioned above what are all these strange
words and how does it at the end end up with the message I see.

Regards,
Rob
 
B

Brian Tillman

rob said:
Thanks for the answer. Adding the domain doesn't help much because
that is always changing, too.
Click to expand...

It's possible something in the headers may be more constant. Rules can
filter on headers, too, at least in Outlook 2003.
 
B

Brian Tillman

rob said:
What are all these additional words in this text and why don't they
show up in the actual message?
Click to expand...

If you were to examine the HTML you included, you could probably answer your
own question. Outlook renders the HTML. Notepad doesn't. In particular,
as one example, the message contains the HTML

<p class=MsoNormal><span style='font-family:Arial'>Want to know how to
save
over 60% on your <span class=SpellE>pi<span
style='display:none;mso-hide:all'>
ironing </span><span class=GramE>Ils</span></span>?</span></p>

This tells the HTML rendering engine to not display the contents of the span
containing the word "ironing" so that the text outside of the inner span,
"pi" and "lls" float together and render as "pills". The text "ironing" is
still there, however, using cut/paste to move it into Notepad will allow it
to be seen.
 
D

Diane Poremsky [MVP]

keyword filters are useless. Get a real spam filter.

--
Diane Poremsky [MVP - Outlook]
Author, Teach Yourself Outlook 2003 in 24 Hours
Coauthor, OneNote 2003 for Windows (Visual QuickStart Guide)
Author, Google and Other Search Engines (Visual QuickStart Guide)



Join OneNote Tips mailing list: http://www.onenote-tips.net/


rob said:
I am getting spam that says:
------
Want to know how to save over 60% on your pills?
http://www.stinservice.com - Successfull and Proven Way to SAVE YOUR
MONEY.

VIAGRA CIALIS VALIUM and many other.

Best PRICES.
High Quality.
Worldwide Shipping.
Total confidentiality
250.000+ satisfied customers.

Have a nice day!
------

A simple key word filter did not work. Some of the reason for that is
that:

1) The letters of "VIAGRA CIALIS VALIUM" are put into table cells so
they can't be parsed.
2) In "pills" they use a capital I for one of the l's.
3) In "MONEY" they use the number 0 for the letter O.
etc.

What I do not understand is how they hide some of the other stuff. The
puzzling thing is that when I paste the whole message in notepad I get
the following:

----
Want to know how to save over 60% on your pi ironing Ils?

http://www.stinserv simpleminded ice.com - Successful condensation l
and Proven Way to SAVE YOU beautician R M0NEY.

nominalism V soaring AG undertenant AL preach lU
dimity l peristyle RA C stover l alveoli IS V omnipresence AL drumhead
M and many other.


Best PR pillory lCES.
High QuaI babble ity.
Worl stodgy dwide SHlPPlNG.
Total c rapidfire onfidentiaIity.
250. bottommost 000+ satisfied customers.

Have a nice gammoning day!
----

What are all these additional words in this text and why don't they
show up in the actual message? Any ideas are appreciated. BTW, in case
it help bellow is the email pasted into Microsoft Word, stored as HTML
and then opened in Notepad.

Regards,
Rob


<html xmlns:blush:="urn:schemas-microsoft-com:blush:ffice:blush:ffice"
xmlns:w="urn:schemas-microsoft-com:blush:ffice:word"
xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html;
charset=windows-1252">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List
href="Want%20to%20know%20how%20to%20save%20over%2060_files/filelist.xml">
<title> </title>
<!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Author>.</o:Author>
<o:LastAuthor>.</o:LastAuthor>
<o:Revision>2</o:Revision>
<o:TotalTime>27</o:TotalTime>
<o:Created>2005-07-18T21:06:00Z</o:Created>
<o:LastSaved>2005-07-18T21:06:00Z</o:LastSaved>
<o:pages>1</o:pages>
<o:Words>88</o:Words>
<o:Characters>508</o:Characters>
<o:Lines>4</o:Lines>
<o:paragraphs>1</o:paragraphs>
<o:CharactersWithSpaces>595</o:CharactersWithSpaces>
<o:Version>11.6360</o:Version>
</o:DocumentProperties>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:punctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;
mso-font-alt:"\FF2D\FF33 \660E\671D";
mso-font-charset:128;
mso-generic-font-family:roman;
mso-font-format:blush:ther;
mso-font-pitch:fixed;
mso-font-signature:1 134676480 16 0 131072 0;}
@font-face
{font-family:"\@MS Mincho";
panose-1:0 0 0 0 0 0 0 0 0 0;
mso-font-charset:128;
mso-generic-font-family:roman;
mso-font-format:blush:ther;
mso-font-pitch:fixed;
mso-font-signature:1 134676480 16 0 131072 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
h1
{mso-style-next:Normal;
margin-top:.25in;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:.5in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:1;
mso-list:l0 level1 lfo3;
tab-stops:list .5in;
font-size:18.0pt;
mso-bidi-font-size:16.0pt;
font-family:Arial;
mso-fareast-font-family:"MS Mincho";
mso-font-kerning:16.0pt;}
h2
{mso-style-next:Normal;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:1.0in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:2;
mso-list:l0 level2 lfo3;
tab-stops:list 1.0in;
font-size:16.0pt;
mso-bidi-font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"MS Mincho";
mso-bidi-font-weight:normal;}
h3
{mso-style-next:Normal;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:1.5in;
text-indent:-.5in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:3;
mso-list:l0 level3 lfo3;
tab-stops:list 1.5in;
font-size:14.0pt;
mso-bidi-font-size:10.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"MS Mincho";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:370300769;
mso-list-template-ids:-1460472312;}
@list l0:level1
{mso-level-style-link:"Heading 1";
mso-level-text:%1;
mso-level-tab-stop:.3in;
mso-level-number-position:left;
margin-left:.3in;
text-indent:-.3in;}
@list l0:level2
{mso-level-style-link:"Heading 2";
mso-level-text:"%1\.%2";
mso-level-tab-stop:.4in;
mso-level-number-position:left;
margin-left:.4in;
text-indent:-.4in;}
@list l0:level3
{mso-level-style-link:"Heading 3";
mso-level-text:"%1\.%2\.%3";
mso-level-tab-stop:.5in;
mso-level-number-position:left;
margin-left:.5in;
text-indent:-.5in;}
@list l0:level4
{mso-level-text:"%1\.%2\.%3\.%4";
mso-level-tab-stop:.6in;
mso-level-number-position:left;
margin-left:.6in;
text-indent:-.6in;}
@list l0:level5
{mso-level-text:"%1\.%2\.%3\.%4\.%5";
mso-level-tab-stop:.7in;
mso-level-number-position:left;
margin-left:.7in;
text-indent:-.7in;}
@list l0:level6
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6";
mso-level-tab-stop:.8in;
mso-level-number-position:left;
margin-left:.8in;
text-indent:-.8in;}
@list l0:level7
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7";
mso-level-tab-stop:.9in;
mso-level-number-position:left;
margin-left:.9in;
text-indent:-.9in;}
@list l0:level8
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8";
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
margin-left:1.0in;
text-indent:-1.0in;}
@list l0:level9
{mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8\.%9";
mso-level-tab-stop:1.1in;
mso-level-number-position:left;
margin-left:1.1in;
text-indent:-1.1in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>

<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>

<div class=Section1>

<p class=MsoNormal>&nbsp;</p>

<p class=MsoNormal><span style='font-family:Arial'>Want to know how to
save
over 60% on your <span class=SpellE>pi<span
style='display:none;mso-hide:all'>
ironing </span><span class=GramE>Ils</span></span>?</span></p>

<p class=MsoNormal>&nbsp;</p>

<p class=MsoNormal><span style='font-family:Arial'><a
href="http://www.tnhoy.stinservice.com"
title="http://www.tnhoy.stinservice.com">http://www.stinserv<span
style='display:none;mso-hide:all'> simpleminded </span>ice.com</a> -
<span
class=SpellE>Successful<span style='display:none;mso-hide:all'>
condensation </span>l</span>
and Proven Way to SAVE YOU<span style='display:none;mso-hide:all'>
beautician </span>R
M0NEY.</span></p>

<p class=MsoNormal>&nbsp;</p>

<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0
style='mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
<tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'>
<td rowspan=2 valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>nominalism </span><span
style='font-size:13.5pt;
font-family:Arial'>V</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
</td>
<td rowspan=2 valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>soaring </span><span
style='font-size:13.5pt;
font-family:Arial'>AG</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
</td>
<td rowspan=2 valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>undertenant </span><span
style='font-size:13.5pt;
font-family:Arial'>AL</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
</td>
<td rowspan=2 valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>preach </span><span class=SpellE><span
style='font-size:13.5pt;font-family:Arial'>lU</span></span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
</td>
</tr>
<tr style='mso-yfti-irow:1;mso-yfti-lastrow:yes'>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>dimity </span><span
style='font-size:13.5pt;
font-family:Arial'>l</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>peristyle </span><span
style='font-size:13.5pt;
font-family:Arial'>RA&nbsp;<span class=SpellE>C<span
style='display:none;
mso-hide:all'> stover </span>l</span></span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>alveoli </span><span
style='font-size:13.5pt;
font-family:Arial'>IS&nbsp;V<span style='display:none;mso-hide:all'>
omnipresence </span>AL</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:Arial;
display:none;mso-hide:all'>drumhead </span><span
style='font-size:13.5pt;
font-family:Arial'>M</span></p>
</td>
<td valign=bottom style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span
style='font-size:13.5pt;font-family:Arial'>&nbsp;<span
class=GramE>and</span>&nbsp;many&nbsp;other.</span></p>
</td>
</tr>
</table>

<p class=MsoNormal>&nbsp;</p>

<p class=MsoNormal><span style='font-family:Arial'>Best <span
class=SpellE>PR<span
style='display:none;mso-hide:all'> pillory
</span>lCES</span>.</span></p>

<p class=MsoNormal><span class=GramE><span
style='font-family:Arial'>High <span
class=SpellE>QuaI<span style='display:none;mso-hide:all'> babble
</span>ity</span>.</span></span></p>

<p class=MsoNormal><span class=GramE><span
style='font-family:Arial'>Worl<span
style='display:none;mso-hide:all'> stodgy </span>dwide <span
class=SpellE>SHlPPlNG</span>.</span></span></p>

<p class=MsoNormal><span class=GramE><span
style='font-family:Arial'>Total <span
class=SpellE>c<span style='display:none;mso-hide:all'> rapidfire
</span>onfidentiaIity</span>.</span></span></p>

<p class=MsoNormal><span style='font-family:Arial'>250<span
class=GramE>.</span><span
style='display:none;mso-hide:all'> bottommost </span>000+ satisfied
customers.</span></p>

<p class=MsoNormal>&nbsp;</p>

<p class=MsoNormal><span style='font-family:Arial'>Have a nice <span
style='display:none;mso-hide:all'>gammoning </span>day!</span></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

</div>

</body>

</html>
Click to expand...
 
R

rob

Brian,

Thank you for answering what I have asked. I did miss the
"display:none". That explains where all these words are coming from in
notepad but that are missing in outlook/WinWord. It probably won't help
much in setting a good filter but that was not the goal of the question
anyways. Just wanted to understand what's going on. Thanks a lot.

Rob
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Garbled email message from ListServe 1
Email is like HTML source code 3
What is this 2
Emails with "display:none" 2
Font color on received messages 1
How do you stop this? 1
Fails then continues without error 6
is there a way to specify where to drop a signature into a station 1

Top