Re: [exim] exiscan and generic scanner: PCRE features

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Tony Finch
Ημερομηνία:  
Προς: Peter Savitch
Υ/ο: exim-users, Tom Kistner
Αντικείμενο: Re: [exim] exiscan and generic scanner: PCRE features
On Mon, 25 Oct 2004, Peter Savitch wrote:
>
> Found: EICAR test file NOT a virus.
> Found the W32/Mydoom.o@MM!zip virus !!!


Irrelevant to Exiscan, but there are more possible patterns than those :-(
One of my scripts tells me:

      m{: /([^/]*)/.*Found the (.+) (virus|trojan) !!! +$}
      m{: /([^/]*)/.*Found virus or variant (.+) !!! +$}


Tony.
--
f.a.n.finch <dot@???> http://dotat.at/
MALIN HEBRIDES: NORTHEAST 4 OR 5 INCREASING 6. RAIN LATER. GOOD BECOMING
MODERATE.