CastleCops® Encoded body but would like to filter decoded contents. How?

Need help? Click here to register for free! Absolutely zero advertisements on this site!

	Donation/Premium

	Donations. Become Premium Today!

	Security Central

	· Home · PIRT/Fried Phish · MIRT · SIRT · Deutsch · Wiki · Newsletter · O16/ActiveX · CLSID List · Contest2007 · Downloads · Feedback (send) · Forums · HijackThis · Hijacktrend · LSPs · My Downloads · O18 · O20 · O21 · O22 · O23 · O9 · Premium · Private Messages · Proxomitron · Reviews · Search · StartupList · Stories Archive · Submit News · WsIRT · Your Account · Acceptable Use Policy

Forum FAQ

Usergroups

Profile

Select FavForums

Encoded body but would like to filter decoded contents. How?

All -> FavForums -> Mailwasher - Troubleshooting / General

[del.icio.us!] [digg it!] [reddit!]

View previous topic :: View next topic

Author

Message

HarryZonker

Trooper
Trooper

Joined: Jul 11, 2006
Posts: 14
Location: Washington, DC

Posted: Fri Jul 28, 2006 3:01 pm Post subject: Encoded body but would like to filter decoded contents. How?

Some spam comes with the entire body of the message encoded. For example:

Quote:

MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: base64

DQoNCkhpIE**aDEuLA0KIA0KV2UgYXJlIGNvbnRhY3RpbmcgeW91IGFib3V0IHlvdXIgcHJvcGVy
....
QTc4NE==

As far as I know, MWPro filters examine only the encoded body. I know you can filter the encoded subject by using "The entire header" filter or the decoded subject using "The 'Subject' field" filter. Can this be accomplished for the body?

HarryZonker

Trooper
Trooper

Joined: Jul 11, 2006
Posts: 14
Location: Washington, DC

Posted: Fri Jul 28, 2006 3:04 pm Post subject:

Whoops. Wrong forum. Sorry.

Prince_Serendip

Site Moderator

Joined: Sep 07, 2002
Posts: 17542

Posted: Fri Jul 28, 2006 5:15 pm Post subject:

No problem. It's fixable. _________________ Microsoft MVP Consumer Security 2006, 2007 & 2008

	All -> FavForums -> Mailwasher - Troubleshooting / General	All times are GMT
Page 1 of 1

You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 155ppm 0.222s (0.044s) Making cybercriminals unhappy since 2002*