Heya, Recipe from SA list suits my needs and catches almost every image spam of this kind: http://svn.apache.org/repos/asf/spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf cheers, Jernej On Dec 11, 2009, at 2:22 PM, Steve Basford wrote: >> Well one can hope it will be restarted... Maybe I'll create an >> equivalent.... > > Hi All, > > spamimg.hdb is basically used for static spam images. > > The current spam runs seem to have totally random md5s though. > > Sanesecurity.Img sigs also match some of these "random" graphics. > > Cheers, > > Steve > Sanesecurity >