I've been looking at some spam I've been getting recently and noticing specific OE version numbers in the X-Mailer line. I don't see those same versions in my own e-mail. Here are some examples:

6.00.3790.4682

6.00.3790.2962

6.00.3790.1106

6.00.3790.181

6.00.2900.2963

6.00.2900.2969

6.00.2800.2962

6.00.2720.4682

6.00.2600.4682

6.00.2600.1409

Is there a conveinent way I can determine if any of those are actual OE versions? Possibly for which OS, and when they would have been the current OE version?

A convenient way would be to borrow rules from spamassassin, but they don't appear to do this - presumably it is so easy for a spammer to find a real version number to use?

Apparently you can check custom rules against a mailbox, but I've not tried it:

http://wiki.apache.org/spamassassin/MassCheck

The long winded way would be to download all the historic OE patches for all windows versions (and all languages?) and check them all...

> A convenient way would be to borrow rules from spamassassin,

> but they don't appear to do this

I have many rules for filtering spam based on the X-mailer line that I use with my e-mail client (Netscape Communicator 4.79). I don't know how powerful or flexible spam assassin is, but I really don't need to use a third-party pre-filter.

> presumably it is so easy for a spammer to find a real version number to use?

Yes, many spams have real or actual legit versions of OE, but as I've posted, I'm seeing new OE versions every week, and I can't find any indication they are real.

> The long winded way would be to download all the historic OE

> patches for all windows versions (and all languages?) and check

> them all...

I do web and usenet searches for the OE versions I've posted, but (a) I get only a handful of hits, and (B) all the usenet hits are in NANAS.

In the past day I've got 3 more:

6.00.2800.2963

6.00.2720.1409

6.00.3790.2963

Does anyone know what 6.00.2720.xxxx is possibly for?