Re: [exim] exiscan and generic scanner: PCRE features

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Tony Finch
Datum:  
To: Peter Savitch
CC: exim-users, Tom Kistner
Betreff: Re: [exim] exiscan and generic scanner: PCRE features
On Mon, 25 Oct 2004, Peter Savitch wrote:
>
> Found: EICAR test file NOT a virus.
> Found the W32/Mydoom.o@MM!zip virus !!!


Irrelevant to Exiscan, but there are more possible patterns than those :-(
One of my scripts tells me:

      m{: /([^/]*)/.*Found the (.+) (virus|trojan) !!! +$}
      m{: /([^/]*)/.*Found virus or variant (.+) !!! +$}


Tony.
--
f.a.n.finch <dot@???> http://dotat.at/
MALIN HEBRIDES: NORTHEAST 4 OR 5 INCREASING 6. RAIN LATER. GOOD BECOMING
MODERATE.