RE: Fwd: YOUR PAYPAL.COM ACCOUNT EXPIRES

[Nick FitzGerald <nick () virus-l demon co uk>]

"Bojan Zdrnja" <Bojan.Zdrnja () LSS hr> wrote:

> Agreed (although - most users will send Windows attachments ;-).
>
> Anyway, for that purpose, a regular expression like:
>
> \.[a-zA-Z][a-zA-Z0-9]{0,3}\.(vbs|pif|scr|bat|com)
>
> Will do it. Amavisd-new has a nice default example for this.

Hmmmmm -- thereby missing all the examples such as:

   BritneysTits.jpg                         .exe

though usually with considerably more spaces than that.  Admittedly 
this is not as common as it once was because newer MUA versions have 
fixed their approach to truncating and displaying overly long 
attachment filenames, but...


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html