Re: [exim] an antivirus for zero-day :)

       set acl_m_ud = ${sg{$mime_decoded_filename}{[^/]+\$}{}}
       condition = ${run{SHELL -c \
         "cd $acl_m_ud; \
          P7ZIP x -y $mime_decoded_filename; \
          GREP -r -a -s -E \
           'rundll32|This program cannot be run in DOS mode|\
            This program must be run under|Embedded Object|\
            WScript\\.Sh|Shell\\.Application|Location: file:' \
           $acl_m_ud" >/dev/null}{1}{0}}