On Tue, 23 Sep 2003, Malte S. Stretz wrote: > But it seems like some of those .EXEs have different "magic" bytes. This > works for me: > /^TV[qp]QAA[MI]AAAAEAA[A8]A/ > > You can change this in EvalTests.pm, line 2413.
For a lot of people it'd probably be easier to edit local.cf to insert: rawbody MICROSOFT_EXECUTABLE /^TV[qp]QAA[MI]AAAAEAA[A8]A/ Slightly less efficient than fixing the eval test, but less perl knowledge required. Is there a reason that wouldn't work? Aside: I'm guessing that the difference in "magic" has to do with whether the executable is a "console" app (i.e. DOS) or a "windows" app. Anyone? ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
