On 06/06/2009, at 1:59 AM, Thomas Eckardt/eck wrote: > The name of the virus is > > 'Sanesecurity.Jurlbl.Auto.16581.UNOFFICIAL' > > but there is no matching regex > > Sanesecurity\.Jurlbl\.Auto\.x=>1.6 > Sanesecurity\.Jurlbl\.x=>2.6 > > the trailing 'x' will the regex prevent from matching > (a trailing 'i' is in > (Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9]?) > \.i=>4.6 ) > ??? > > I think the regexes should be: > > Sanesecurity\.Jurlbl\.Auto\.=>1.6 > Sanesecurity\.Jurlbl\.=>2.6 > (Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9]?) > \.=>4.6
Hmm. Still now working :-( Jun-6-09 12:30:21 id-55420-11382 [Worker_2] 192.168.1.2 <[email protected] > to: [email protected] Message-Score: added 45 for virus detected: 'Sanesecurity.Jurlbl.Auto.21660.UNOFFICIAL', total score for this message is 45 Jun-6-09 12:30:21 id-55420-11382 [Worker_2] [VIRUS] 192.168.1.2 <[email protected] > to: [email protected] [spam found] (virus detected: 'Sanesecurity.Jurlbl.Auto.21660.UNOFFICIAL') [Legally erase your biIIs] -> /applications/assp/discarded/55420.eml; Jun-6-09 12:30:21 [Worker_2] Disconnected: 192.168.1.2 James. ------------------------------------------------------------------------------ OpenSolaris 2009.06 is a cutting edge operating system for enterprises looking to deploy the next generation of Solaris that includes the latest innovations from Sun and the OpenSource community. Download a copy and enjoy capabilities such as Networking, Storage and Virtualization. Go to: http://p.sf.net/sfu/opensolaris-get _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
