It looks like I have 3 different tests:
^TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQA
^TV[pq]QAA[MI]AAAAEAA[8A]A
^TVoAAAEAAAACAAAA//8A
If my figuring is right, I should just use Keith's.
peter
> From: "Keith C. Ivey" <[EMAIL PROTECTED]>
> Date: Sat, 27 Nov 2004 10:49:16 -0500
> To: [EMAIL PROTECTED]
> Subject: executable signatures [was Re: bunch o' commits]
>
> John Peacock <[EMAIL PROTECTED]> wrote:
>
>> And make sure before it gets added to the Qpsmtpd project that any additional
>> executable signatures get added, too. I know of only one additional:
>>
>> TVoAAAEAAA
>
> My regex has evolved over time to become
> /^TV[opq][AQ]AA[EIM]AAAA[CE]AA[8A]A/, but I haven't documented
> why I made the changes. Of course the big problem is how to
> deal with .zip files.
>
> --
> Keith C. Ivey <[EMAIL PROTECTED]>
> Washington, DC
>
>
