This has been covered so many times on this list.

1:  if you're not on spamassassin 3.1.5 get it now, and run sa-update
(via a cron job daily, but test first with a manual sa-update -D)

2:  pop over to http://www.rulesemporium.com and get an appropriate
selection of their rules, and configure Rules du Jour (
http://www.exit0.us/index.php?pagename=RulesDuJour ) to download them
daily.

3:  don't forget the additional rules here:
http://www.rulesemporium.com/other-rules.htm
I've found Fred's header rules helpful

4:  add the ImageInfo plugin from
http://www.rulesemporium.com/plugins.htm

5:  if you want to be adventurous, make sure you have ImageMagick,
ImageMagick-perl and other prerequisites installed and use the FuzzyOCR
plugin ( latest version at http://www.joval.info/proj/FuzzyOcr.html ,
but see also http://wiki.apache.org/spamassassin/FuzzyOcrPlugin ).
The FuzzyOCR mailing list is very helpful too.

In my experience here a well-trained Bayes plus the various
RulesEmporium rulesets gets most of them.

Cheers,

Phil
--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

>  -----Original Message-----
>  From: Dylan Bouterse [mailto:dylan@[...].com] 
>  Sent: 02 October 2006 14:38
>  To: users@[...].org
>  Subject: Stock spam in images
>  
>  I'm a newbie to the list and have been scanning recent posts to see if
>  what I'm about to ask about has been covered but I haven't 
>  seen anything
>  yet.
>  
>  Lately I have been getting more and more of the stock alert 
>  spam but now
>  all the good info is in an image and typically following the image is
>  random text to fool the Bayesian filter. I think the random text thing
>  has been covered here recently. It's frustrating when sa is giving a
>  -1.6 (or so) score to these emails right off the bat. Quite a few of
>  these aren't even getting spam headers because they aren't 
>  scoring high
>  enough. Is there some magical trick to help score these 
>  messages higher?
>  Maybe a future version of sa will incorporate an OCR module? :)
>  
>  Dylan
>