On Monday 08 March 2004 10:51 am, Jesper Juhl wrote: --snip-- > The first "qr" block checks for double extensions like file.foo.exe and > ban such files if the last extension is one of vbs|pif|scr|bat|com|exe|dll > the next two "qr" blocks block files purely based on the last extension. > The next "qr" block blocks based on the output from file(1), and the last > "qr" block blocks based on mime type. --snip-- This brings up an interesting point. I've never seen a legitimate file on a windows box with two or more 3-character extensions. Would it be a bad assumption to make?
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
