> >Assuming I can see MIME headers, what would I look for? >Most likely, you won't be able to see MIME headers (most mail clients let >you see the standard E-mail headers, but I haven't seen any yet that >display the MIME headers from the body of the E-mail). > >If so, you should see the full E-mail headers, followed by at least one >blank line, followed by some other headers (the key being the blank line, >that separates the standard headers from the body of the E-mail and/or >headers in the body). If you see "Content-Transfer-Encoding: base64", that >would indicate that the E-mail (or part of it) is base64 encoded.
I haven't seen that yet, but then I haven't been looking for it, either. In any case, I think I resolved the problem. Since I had only been viewing the message with PocketKnife Peek, I had not been seeing the unicode characters from it's original language, only question marks in their place. When viewing the message in Outlook it looks like this: Уникальная возможность всего за неделю... and so on. Russian or Eastern European, I'm guessing.(If you don't view this message in unicode, you won't see what I pasted above, but perhaps question marks or something else instead). Hence, the filter on question marks doesn't catch it. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
