Thu Apr 8 01:05:02 PST 2004 -- masscheck.201.sh -- beginning test of 81.mr_wiggly.cf

Section 1 -- Emails flagged as spam

Spam identified as spam by these rules: 2622 of 88712
Ham  identified as spam by these rules: 0 of 20436


Section 2 -- Rules tested

# Mr Wiggly rule.
# Specific to a certain type of spammer that often uses only an image for V-Drug
# Also hits an anti-aging drug spam by the same spammer.
# Chris Santerre
# SARE rule 03/29/03
# www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm

rawbody __VDRUG1 /^\<html\>\<body\>/
rawbody __VDRUG2 /^\<center\>\<\!\-\-.{10,25}\-\-\>\<a href\=\"http\:\/\//
rawbody __VDRUG3 /[a-zA-Z]{0,2}\d{0,2}\.(?:jpg|gif)\" border\=0\>\<\/a\>\<\/center\>/
rawbody __VDRUG4 /^\<\/?body\>\<\/html\>/
meta MRWIGGLY (__VDRUG1 && __VDRUG2 && __VDRUG3 && __VDRUG4)
describe MRWIGGLY Mr. Wiggly enhance drug spam.
score MRWIGGLY 5.0 #score to taste


Section 3 -- Frequencies Log
(First numeric frequencies, followed by percentage frequencies)

OVERALL     SPAM      HAM     S/O   SCORE  NAME
 109148    88712    20436    0.813   0.00    0.00  (all messages)
   2622     2622        0    1.000   0.00   5.00  MRWIGGLY

OVERALL%   SPAM%     HAM%     S/O    RANK   SCORE  NAME
 109148    88712    20436    0.813   0.00    0.00  (all messages)
100.000  81.2768  18.7232    0.813   0.00    0.00  (all messages as %)
  2.402   2.9556   0.0000    1.000   0.00    5.00  MRWIGGLY


Section 4 -- Recommended Scores and Hit Log

Required Hits = 5
#counts	MRWIGGLY	2622s/0h of 109148 corpus (88712s/20436h) 04/07/04
MRWIGGLY -- suggested score: 2.222 (of 5)

Thu Apr 8 01:49:12 PST 2004 -- masscheck.201.sh -- completed test of 81.mr_wiggly.cf