Best Buy Award, 2002

From: a_turkmen2at_private
Date: Sat Aug 09 2003 - 16:38:17 PDT

  • Next message: linuxmoduleat_private: "Network"

    This mail is probably spam.  The original message has been attached
    along with this report, so you can recognize or block similar unwanted
    mail in future.  See http://spamassassin.org/tag/ for more details.
    
    Content preview:  A HACKER MAY BE IN YOUR SYSTEM! most common viruses
      infect themselves through email! Norton anti-virus protects you from
      ALL transmission methods btw, you look great today. Purchase Norton
      Now! http://profitableproducts.com/default.asp?id000 [...] 
    
    Content analysis details:   (9.80 points, 5 required)
    NO_REAL_NAME       (1.0 points)  From: does not include a real name
    BAYES_30           (-1.6 points) BODY: Bayesian classifier says spam probability is 30 to 40%
                       [score: 0.3452]
    REMOVE_PAGE        (0.3 points)  URI: URL of page called "remove"
    HTTP_USERNAME_USED (0.8 points)  URI: Uses a username in a URL
    USERPASS           (1.0 points)  URI: URL contains username and (optional) password
    RCVD_IN_DSBL       (3.6 points)  RBL: Received via a relay in list.dsbl.org
                       [RBL check: found 177.189.171.200.list.dsbl.org.]
    RCVD_IN_NJABL      (3.5 points)  RBL: Received via a relay in dnsbl.njabl.org
                       [RBL check: found 177.189.171.200.dnsbl.njabl.org., type: 127.0.0.9]
    RCVD_IN_OSIRUSOFT_COM (0.5 points)  RBL: Received via a relay in relays.osirusoft.com
                       [RBL check: found 177.189.171.200.relays.osirusoft.com., type: 127.0.0.4]
    FROM_HAS_UNDERLINE_NUMS (0.7 points)  From: contains an underline and numbers/letters
    
    
    
    
    

    attached mail follows:


    A HACKER MAY BE IN YOUR SYSTEM! most common viruses infect themselves through email! Norton anti-virus protects you from ALL transmission methods btw, you look great today. Purchase Norton Now! http://profitableproducts.com/default.asp?id=3000 ps. dont want any more of this shit? fd5sopat_private/remove/remove.html">http://fd5sopat_private/remove/remove.html _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module



    This archive was generated by hypermail 2b30 : Sat Aug 09 2003 - 16:31:49 PDT