Subject: recognizing a certain spam

From: Matt Ackeret <[email-masked]>
Date: Thu, 19 Sep 2002 10:58:13 -0700 (PDT)

One of the virii always shows up something like this:

From: dr_eaglevision <[email-masked]>
To: [email-masked]
Subject: MyLinks.sort()
Parts/Attachments:
   1   OK      ~4 lines  Text
   2           93 KB     Audio
   3 Shown      0 lines  Text
   4          1.5 KB     Application
----------------------------------------

    [ Part 1, Text/HTML  4 lines. ]
    [ Not Shown. Use the "V" command to view or save this part. ]

    [ Part 2, Audio/X-MIDI  125KB. ]
    [ Cannot play this part. Press "V" then "S" to save in a file. ]

    [ Part 4, Application/OCTET-STREAM (Name: "mylinks")  2.1KB. ]
    [ Cannot display this part. Press "V" then "S" to save in a file. ]

they have different parts and titles, but always has 4 parts (including an
empty text/plain).

Is there some way I can filter on these emails to move them to my
suspected_spam folder?

---

From: Kenneth Crudup <[email-masked]>
Date: Thu, 19 Sep 2002 11:07:16 -0700 (PDT)

> From: dr_eaglevision <[email-masked]>

... and the forge the From: part- wait 'till you start getting *bounces*
(or worse, flame mail) from folks forging you!

	-Kenny, who wouldn't run "MS LookOut!" if my life depended on it

-- 
Kenneth R. Crudup    Sr. SW Engineer, Scott County Consulting, Los Angeles, CA
Home:	3801 E. Pacific Coast Hwy #9, Long Beach, CA 90804-2014 (888) 454-8181
Work:	2052 Alton Parkway, Irvine, CA 92606-4905	   (949) 252-1111 X240