Autor: Lena Datum: To: exim-users CC: Paul Lenz Betreff: Re: [exim] an antivirus for zero-day :)
One more correction:
set acl_m_ud = ${sg{$mime_decoded_filename}{[^/]+\$}{}}
condition = ${run{SHELL -c \
"cd $acl_m_ud; \
P7ZIP x -y $mime_decoded_filename; \
GREP -r -a -s -E \
'rundll32|This program cannot be run in DOS mode|\
This program must be run under|Embedded Object|\
WScript\\.Sh|Shell\\.Application|Location: file:' \
$acl_m_ud" >/dev/null}{1}{0}}