Hello Marck,

Marck wrote:

MDP> ... I've seen spam come through with "The Bat! (1.52f)
MDP> Business" as the X-Mailer and an X-MS-Priority header.

*Is* there a TB! "Business" version? I DO recall seeing that on the
spam I saw with TB! mentioned as the mailer in the header.

MDP> Advanced Mass Sender (AMS) by Max Terentiev (a spamming tool)
MDP> will allow you to choose one of four fake X-Mailer headers to
MDP> obfuscate, confound and incriminate:

MDP> Advanced Mass Sender
MDP> Outlook Express 4.72
MDP> X-Mailer
MDP> The Bat! (v1.52f) Business

I changed computers and haven't integrated the old message base yet,
which makes it harder to find. Furthermore, I probably eliminated
the message since it was spam and I was chronically low on disk
space. OTOH, I was so low I stopped downloading from some accounts
and when I finally did on the new computer, almost 8 thousand
messages came in.

MDP> Check that spam, if you still have it. I'll bet that's what sent it.

I search all accounts for "v1.52f" in the header and found 36
messages with v1.52f, 15 of those were sent to this and other TB!
lists and 3 of those were sent using the "v1.52f Business" edition,
so there may have been a business version sold by RITLabs. The other
21 messages were received by 3 accounts and are spam directed to ALL
accounts of two ISPs. Most of these are _HTML_ mail, which indicates
that they were NOT in fact sent using The Bat!, unless the Business
version (if there is one) included (the hated) HTML mail capacity.
Most of those were in Trash directories.

Is there a way to determine whether AMS was used?

Douglas


________________________________________________________
Current Ver: 1.61
FAQ        : http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Bug Reports: https://www.ritlabs.com/bt/

Reply via email to