F00000 (\r\n\r\n|\n\n)PK.*liveupd LiveUPD;ALL;BLOCK 

F00000 梥  ଠ HTML 
(\r\n\r\n|\n\n) -  HTTP  
PK.*liveupd - ᪮ ப (⠩   PERL) 
LiveUPD - ७ 砥 䠩 
ALL;BLOCK - ਭ  㯯

---------------------------------------------------------

regex.txt 
ଠ: 
C00000 (\r\n\r\n|\n\n)\xFF\xD8 jpg ALL;image 
__1___ _____2________ ___3____ _4_ _____5___ 

1 - 梥 
2 - \r\n\r\n  \n\n -  HTTP response. 
3 - ࠪ ᮪ (ᨣ) 䠩.    묨 ⠬ 䠩,   ⮪ ࠭஢ 㦠 ⮫쪮 http_data_l=128 ,   ᥣ 뢠  .    뤥 
4. ७. 
5. 㯯 १ ; 
ਬ: 
C00000 (\r\n\r\n|\n\n)\xFF\xD8 jpg ALL;image 
   䠩 FF D8, ७ jpg, 䠩 室  㯯 ALL   㯯 image. 
⢥⢥   㦠  +jpg, c +ALL   +image. 

⠪: F00000 (?i)(\r\n\r\n|\n\n)(PK|Rar!|.......\*\*ACE\*\*).*\.mp3 p-mp3;All;FAV 
: (PK|Rar!|.......\*\*ACE\*\*) - (Zip-䠩(稭  )  Rar  ACE),  ࢮ  ண ᮤঠ ᨬ .mp3 ᢠ ७ p-mp3 ⭮  㯯 All, FAV 

\. -  窠 
. -  ᨬ 
 ॣ ࠦ perl. 

⨫,  ᫨  ७ ⨯ mp3.rar, ⮣ ࠧ १ 㪢 G    ந ⮫쪮  rar,  mp3.rar     ᯨ᪥,  p-mp3    㯯 뤥. ,  Total Commander!  䠩  ⠪ ७ ४᭮ 뢠, ᯠ뢠: 뤥塞 㯯 䠩  ALT+F9  ᯠ뢠 楫 㯯 (᫨   ⮬) 


: ॣ   砫 䠩 ( ᫥ ࢮ ப), ⠪  ࠡ뢠 ᠬ 孨! 


 襣  ஢ ࠧ 䫠: 
F00000 (\r\n\r\n|\n\n).*FazztAnnouncement FZA 
F00000 (\r\n\r\n|\n\n)\x9E\xB6\x1D\x2A\xB7\xA3\x40\x9E EFA 
F00000 (?i)(\r\n\r\n|\n\n)PK.*\.efa EFA.zip;EFA 
F00000 (?i)(\r\n\r\n|\n\n)Rar!.*\.efa EFA.rar;EFA 
F00000 (?i)(\r\n\r\n|\n\n)PK.*\.fza FZA.zip;FZA 
F00000 (?i)(\r\n\r\n|\n\n)Rar!.*\.fza FZA.rar;FZA 

  : 
F00000 (?i)(\r\n\r\n|\n\n)PK.*\.cfa EFA.zip;EFA 
F00000 (?i)(\r\n\r\n|\n\n)Rar!.*\.cfa EFA.rar;EFA 

⭮ ⠢塞  8 ப   ன ப regex.txt 
塞 ஡       IE. 

塞   log=0 ᫨ . 
᪠. 
室. 
ਬ ,    㣠 த !compile !match 
᫨ ,  ॣ ⪮﫨 ) 
=============================== 
ਯ⨪  ஢ન regex.txt 

: 

#!/usr/bin/perl 
use strict; 
use File::Find; 

open(my $f, "<regex.txt"); 
my $t = <$f>; 
chomp $t; 

my %re = (); 
foreach(<$f>) 
{ chomp; 
if(/$t/) 
{ my $c = ".$3 {$4}"; 
my $r = $2; 

if($r =~ s/\(\\r\\n\\r\\n\|\\n\\n\)/^/) 
{ $re{qr/$r/} = $c; 
print "$r $c\n"; 
} 
} 
} 
close $f; 
print "\n\n"; 

my @l = (); 

sub process 
{ s#\.\/##g; 
return if -d $_; 
push @l, $_; 
} 

find({ wanted => \&process, no_chdir => 1 }, $ARGV[0]); 

print "LIST:\n"; 
foreach(@l) 
{ print "$_;"; 
} 
print "\n\n"; 

my %r = (); 
my $nm = ''; 

foreach(@l) 
{ my $n = $_; 
next unless open(my $f, "<$n"); 
binmode $f; 
my $d = ''; 
if(sysread($f, $d, 128)) 
{ my $c = 0; 
foreach(keys %re) 
{ if($d =~ /$_/) 
{ $r{$_} .= "$n\n"; 
$c++; 
} 
} 
$nm .= "$n\n" if(!$c); 
} 
close $f; 
} 

foreach(keys %r) 
{ print "$_\n\n"; 
print $r{$_}; 
print "\n\n"; 
} 

print "NO MATCH\n$nm"; 



᪠ ਬ୮ ⠪: 
d:\perl\bin\perl.exe regex_test.pl "c:/temp" >output.txt 
========================================================== 
 regex.txt 

============================== 
^(\S+)\s+(\S+)\s+(\S+)\s*(.*)$ 

F00000 (\r\n\r\n|\n\n)\x9E\xB6\x1D\x2A\xB7\xA3\x40\x9E EFA;ALL;EFA 
F00000 (\r\n\r\n|\n\n)PK.*\.efa EFA.zip;ALL;EFA 
F00000 (?i)(\r\n\r\n|\n\n)(PK|Rar!|.......\*\*ACE\*\*).*\.efa up-efa.arch;ALL;EFA 
F00000 (\r\n\r\n|\n\n)PK.*\.cfa up--EFA.zip;ALL;EFA 
F00000 (?i)(\r\n\r\n|\n\n)(PK|Rar!|.......\*\*ACE\*\*).*\.cfa cfa.arch;ALL;CFA 
FFFF80 (?i)(\r\n\r\n|\n\n).*SoftCam softcam;ALL;softcam 
FFFF80 (?i)(\r\n\r\n|\n\n).*viaccessfree viaccessfree.htm;ALL;viaccessfree 
FFFF80 (?i)(\r\n\r\n|\n\n).*www.kpnemo.ru kpnemo.htm;ALL;kpnemo 
FFFF80 (?i)(\r\n\r\n|\n\n).*www.nnm.ru nnm.htm;ALL;nnm 
FF8B17 (?i)(\r\n\r\n|\n\n).*lotterycheck lotterycheck.htm;ALL 
F00000 (?i)(\r\n\r\n|\n\n)(PK|Rar!|.......\*\*ACE\*\*).*\.fza up-fza.arch;EFA;ALL 
F00000 (?i)(\r\n\r\n|\n\n).*<FazztAnnouncement FazztAnnouncement.fza;ALL;FZA 
F00000 (?i)(\r\n\r\n|\n\n)(PK|Rar!|.......\*\*ACE\*\*).*\.max max.arch;ALL;3dMAX 
FFFF80 (?i)(\r\n\r\n|\n\n).*\x73\x66\x76\x20 sfv;ALL 


F00000 (\r\n\r\n|\n\n)PK.*DRW DrWEB;ALL;FAV 
F00000 (\r\n\r\n|\n\n)PK.*drw DrWEB;ALL;FAV 
F00000 (\r\n\r\n|\n\n)PK.*\.mp3 p-mp3;All;FAV 
F00000 (\r\n\r\n|\n\n)Rar!.*\.mp3 p-mp3;All;FAV 
F00000 (\r\n\r\n|\n\n)Rar!.*\.wmv p-wmv;All;FAV 
F00000 (\r\n\r\n|\n\n)PK.*\.wmv p-wmv;All;FAV 
F00000 (\r\n\r\n|\n\n)Rar!.*\.avi p-avi;All;FAV 
F00000 (\r\n\r\n|\n\n)PK.*\.avi p-avi;All;FAV 
F00000 (\r\n\r\n|\n\n)Rar!.*\.rm p-rm;All;FAV 
F00000 (\r\n\r\n|\n\n)PK.*\.rm p-rm;All;FAV 




F00000 (\r\n\r\n|\n\n)PK.*liveupd LiveUPD;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*CATALOG NAV;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*BannerHash BannerHash;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*addregkey addregkey;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*Sevinst Sevinst;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*CameraWare CameraWare;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*chatspace chatspace;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*META-INF META-INF;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*net/spray/ META-INF;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.......................................patch patch;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK..................................gbd gbd;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................Beyond Beyond;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*ccpatch ccpatch;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................NAV NAV;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*symids symids;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*ARnss ARnss;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*adblock adblock;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*LUUpdate LUUpdate;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*adupdate adupdate;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*sitehash sitehash;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................netscape;netscape ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................aol aol;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................yahoo yahoo;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................nsw.dis nsw;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*DlayUpdt DlayUpdt;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*CSFFCOM.DLL CSFFCOM.DLL;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................amazon amazon;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................msn msn;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................RtPlayer RtPlayer;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*symids symids;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................gbdl gbdl;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................y/cnt/ y;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................y/s/0 y;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................a/a/a/a/a y;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................lycos lycos;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK............................com/diginet digi;ALL;BLOCK 
F00000 (\r\n\r\n|\n\n)PK.*notrgs notrgs;ALL;BLOCK 


C00000 (\r\n\r\n|\n\n)\xFF\xD8 jpg;ALL;IMAGE 
C00000 (\r\n\r\n|\n\n)GIF gif;ALL;IMAGE 
8080C0 (?i)(\r\n\r\n|\n\n).*<(html|!doctype|head|body) htm;ALL;TEXT 
C00000 (\r\n\r\n|\n\n)BM bmp;ALL;IMAGE 
C00000 (\r\n\r\n|\n\n)%PNG png;ALL;IMAGE 
000000 (\r\n\r\n|\n\n)FWS swf;ALL;FLASH 
000000 (\r\n\r\n|\n\n)CWS swf;ALL;FLASH 
8080C0 (\r\n\r\n|\n\n)AT&TFORM djvu;ALL;IMAGE 
008000 (\r\n\r\n|\n\n)PK zip;ALL;ARCHIVE 
008000 (\r\n\r\n|\n\n)7z 7z;ALL;ARCHIVE 
008000 (\r\n\r\n|\n\n)\x60\xEA\x2F arj;ALL;ARCHIVE 
008000 (\r\n\r\n|\n\n)StuffIt sit;ALL 
800000 (\r\n\r\n|\n\n)MZ ex_;ALL;ex_ 
8080C0 (\r\n\r\n|\n\n)%PDF pdf;ALL;TEXT 
008000 (\r\n\r\n|\n\n)Rar! rar;ALL;ARCHIVE 
008000 (\r\n\r\n|\n\n).......\*\*ACE ace;ALL;ARCHIVE 
8000C0 (\r\n\r\n|\n\n)BZh91 tar.bz2;ALL;UNIX 
8000C0 (\r\n\r\n|\n\n).ELF elf;ALL;UNIX 
8000C0 (\r\n\r\n|\n\n)!<arch>.debian-binary deb;ALL;UNIX 
8000C0 (\r\n\r\n|\n\n)\x41\x6C\x42 beos.pkg;ALL 
8000C0 (\r\n\r\n|\n\n)\xED\xAB\xEE\xDB rpm;ALL;UNIX 
8080C0 (\r\n\r\n|\n\n)\{\\\\rtf rtf;ALL;TEXT 
80C000 (\r\n\r\n|\n\n)RIFF....AVI avi;ALL;VIDEO 
00C000 (\r\n\r\n|\n\n)RIFF....WAVE wav;ALL;AUDIO 
80C000 (\r\n\r\n|\n\n)0\& wmv;ALL;VIDEO 
80C000 (\r\n\r\n|\n\n)\x00\x00\x01\xB3 mpg;ALL;VIDEO 
00C000 (\r\n\r\n|\n\n)MT mid;ALL;AUDIO 
00C000 (\r\n\r\n|\n\n)ID3 mp3;ALL;AUDIO 
00C000 (\r\n\r\n|\n\n)\xFF\xFB mp3;ALL;AUDIO 
00C000 (\r\n\r\n|\n\n)\xFF\xFA mp3;ALL;AUDIO 
00C000 (\r\n\r\n|\n\n)Ogg ogg;ALL;AUDIO 
000000 (\r\n\r\n|\n\n)%! ps;ALL 
000000 (\r\n\r\n|\n\n)\\004%! ps;ALL 
8000C0 (\r\n\r\n|\n\n)\x1F\x8B gz;ALL;UNIX 
8080C0 (\r\n\r\n|\n\n)#!.*/perl pl;ALL;TEXT 
000000 (\r\n\r\n|\n\n).RMF rm;ALL 
000000 (\r\n\r\n|\n\n)MSCF cab;ALL 
8080C0 (\r\n\r\n|\n\n)ITSF chm;ALL 
C00000 (\r\n\r\n|\n\n)\x49\x49\x2A tif;ALL;IMAGE 


8080C0 (?i)(\r\n|\n)content-type:\sapplication/msword doc;ALL;TEXT 
8080C0 (?i)(\r\n|\n)content-type:\sapplication/pdf pdf;ALL;TEXT 
000000 (?i)(\r\n|\n)content-type:\sapplication/postscript ps;;ALL 
8080C0 (?i)(\r\n|\n)content-type:\sapplication/vnd.ms-excel xls;ALL;TEXT 
000000 (?i)(\r\n|\n)content-type:\sapplication/vnd.ms-powerpoint ppt;ALL 
8000C0 (?i)(\r\n|\n)content-type:\sapplication/x-gtar gtar;ALL;UNIX 
000000 (?i)(\r\n|\n)content-type:\sapplication/x-javascript js;;ALL 
8080C0 (?i)(\r\n|\n)content-type:\sapplication/x-latex latex;ALL;TEXT 
000000 (?i)(\r\n|\n)content-type:\sapplication/x-shockwave-flash swf;ALL 
8000C0 (?i)(\r\n|\n)content-type:\sapplication/x-tar tar;ALL;UNIX 
8080C0 (?i)(\r\n|\n)content-type:\sapplication/x-tex tex;ALL;TEXT 
00C000 (?i)(\r\n|\n)content-type:\saudio/basic au;;ALL;AUDIO 
00C000 (?i)(\r\n|\n)content-type:\saudio/midi mid;ALL;AUDIO 
00C000 (?i)(\r\n|\n)content-type:\saudio/mpeg mp3;ALL;AUDIO 
000000 (?i)(\r\n|\n)content-type:\saudio/x-aiff aif;ALL 
000000 (?i)(\r\n|\n)content-type:\saudio/x-pn-realaudio rm;;ALL 
000000 (?i)(\r\n|\n)content-type:\saudio/x-realaudio ra;;ALL 
00C000 (?i)(\r\n|\n)content-type:\saudio/x-wav wav;ALL;AUDIO 
C00000 (?i)(\r\n|\n)content-type:\simage/bmp bmp;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/gif gif;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/ief ief;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/jpeg jpg;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/png png;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/tiff tif;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/x-portable-anymap pnm;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/x-portable-bitmap pbm;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/x-portable-graymap pgm;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/x-portable-pixmap ppm;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/x-rgb rgb;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/x-xbitmap xbm;ALL;IMAGE 
C00000 (?i)(\r\n|\n)content-type:\simage/x-xpixmap xpm;ALL;IMAGE 
000000 (?i)(\r\n|\n)content-type:\smodel/vrml wrl;ALL 
000000 (?i)(\r\n|\n)content-type:\stext/css css;ALL 
8080C0 (?i)(\r\n|\n)content-type:\stext/html htm;ALL;TEXT 
8080C0 (?i)(\r\n|\n)content-type:\stext/richtext rtx;ALL;TEXT 
8080C0 (?i)(\r\n|\n)content-type:\stext/rtf rtf;ALL;TEXT 
8080C0 (?i)(\r\n|\n)content-type:\stext/xml xml;ALL;TEXT 
80C000 (?i)(\r\n|\n)content-type:\svideo/mpeg mpg;ALL;VIDEO 
80C000 (?i)(\r\n|\n)content-type:\svideo/quicktime mov;ALL;VIDEO 
80C000 (?i)(\r\n|\n)content-type:\svideo/x-msvideo avi;ALL;VIDEO 

000000 . bin;ALL 

