I try
/\.exe$/i
?i.exe$
without success
So the question is. How I set a a case-insensitivity flag for the
expression in clamav?
El 17/09/2013 14:51, Bowie Bailey escribió:
On 9/17/2013 3:47 PM, Douglas Goddard wrote:
On Tue, Sep 17, 2013 at 3:05 PM, Alejandro Rodriguez
<arodrig...@b2ec.net>wrote:
How I can ignore uppercase in a filename.
Right now i´m using foxhole_all.cdb to block .exe files inside .zip
archives
However if the zip contain archive.EXE (in uppercase) the scan miss.
Sanesecurity.Foxhole.Zip_exe:**CL_TYPE_ZIP:*:\.exe$:*:*:*:*:***:*
It is a regular expression. So you could replace exe with something like
(exe|EXE) to detect both uppercase and lowercase.
Or you could do [eE][xX][eE], if you wanted to be really thorough.
Isn't there a case-insensitivity flag for the expression?
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
