[exim] regex help - links to exe files

Trying to use the regex ACL conditional to catch email that link to
Windows exe files

http://www.phisher.com/virus.exe

Even when I use the \N .. \N it seems to not like the ":" in the middle.
Is this a bug?

Anyhow - what's a good regex expression for catching links to exe files?