Don't understand this match

Richard Thomas richard.thomas at
Wed Mar 1 21:16:09 GMT 2006

Julian Field wrote:

>This regexp is just fine, it has been there for several years without 
>any changes whatsoever. I wrote it carefully and got it right first time.

OK, based on that, I dug a little deeper...

It *is* a dodgy filename

    Content-Type: application/;
            name="Shortcut (2) to Copy of PayrollTFC (version 2) 3.lnk.xls"
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment;
            filename="Shortcut (2) to Copy of PayrollTFC (version 2)

But MailScanner is reporting the filename as beign the valid one

Warning: This message has had one or more attachments removed
Warning: (Shortcut 29 t.xls).
Warning: Please read the "PsySolutions-Attachment-Warning.txt" attachment(s)
for more information.



This is a message from the MailScanner E-Mail Virus Protection Service
The original e-mail attachment "Shortcut 29 t.xls"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Wed Mar  1 12:44:39 2006 the virus scanner said:
   MailScanner: Attempt to hide real filename extension (Shortcut 29 t.xls)

Again, we may just be behind the times.


MIS Department      | Psychiatric Solutions Inc |Phone: +1 615 312 5787
840 Crescent Ctr Dr |                           |Fax:   +1 615 312 5711
Suite 460           +---------------------------+----------------------
Franklin, TN 37067  |Support: helpdesk at +1 615 312 5888

-------------- next part --------------
An HTML attachment was scrubbed...

More information about the MailScanner mailing list