sp as an AV fallback :-)

I thought you might find this interesting.  It's spamprobe's
trace output of an email containing a virus.  Everything that
my 2 AV checkers detect is used to train spamprobe as spam,
so it catches a lot of new viruses before the AV guys
have the patterns out for them, because the virus writers
are pretty consistent about the text that accompanies
the viruses...  and application/octet-stream is a *major*
clue :-)

G
==========

spamprobe summarize -T fileUujLKL
File: fileUujLKL
Message Num: 1
Message-ID:
Digest: 0fc7ce27edc8e85655c8a7c6bab1cd94
Subject: URL YLAQN
NumTerms: 125
Score: 0.9993418
       Spam Prob   Count    Good    Spam  Word
       0.9999966       1       0    3734  Hfrom_mail panam.edu
       0.9999939       1       0    2092  panam support
       0.9999928       1       0    1787  password.zip
       0.9999884       1       0    1108  attachment no
       0.9999866       1       0     961  virus clean
       0.9999818       1       0     708  clean panam
       0.9999735       1       0     485  name updated-password.zip
       0.9999735       1       0     485  updated-password.zip
       0.9999642       1       0     359  dear user
       0.9997991       1       0      64  team attachment
       0.9996429       1       0      36  successfully updated
       0.9995568       1       0      29  panam.edu thank
       0.9995239       1       0      27  antivirus www.panam.edu
       0.9995239       1       0      27  panam antivirus
       0.9994412       1       0      23  using panam
       0.9994158       1       0      22  contact panam
       0.9994158       1       0      22  panam customer
       0.9992441       1       0      17  panam the
       0.9974346       1       0       5  at mail
       0.0072289       1      10       4  Hsubject_url
       0.9803182       1      47 1262713  octet-stream name
       0.9799079       1      48 1262732  application octet-stream
       0.9799079       1      48 1262737  octet
       0.9799079       1      48 1262732  octet-stream
       0.9743534       1       1    2087  the panam
       0.9742934       1       1    2082  panam account
       0.9742452       1       1    2078  your panam


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642