[Mimedefang] klez detection

David F. Skoll dfs at roaringpenguin.com
Mon Mar 31 14:42:01 EST 2003


On Mon, 31 Mar 2003, -ray wrote:

>          if (join("",@{$entity->body}) =~ /TVqQAAMAAAAEAAAA/) {

I suspect that will match most M$ Windoze executables encoded using
base64 encoding.

Regards,

David.



More information about the MIMEDefang mailing list