need help with RegExp

Hi TBTECH'ers,

I'm new to TB! and RegExp so sorry if this sounds too basic. I've
searched TBTECH archives but didn't find anything that helped.

I'm trying to detect emails that have hidden http links to dangerous
files (scr, exe, etc) in HTML documents . Here are two examples:

<ahref="http://host144dnx.plugin.com/foto007.scr">http://www.fee.com/docs/fotos/Loren.jpg</a></font></font></p>

href=3D"http://www.swedx.com/catalog/includes/languages/espanol/images/ca=
rdwelcome1903703446A8994.scr"

On the second example, notice how the bastard breaks the line in two,
probably to avoid detection (I believe the ending "=" is a "soft
break").

After reading TB! helpfiles I thought of a filter, something like
this:

<message source> matches all as Regex <http://.*\.scr>
action <Set color group to> "Virus Warning"

That doesn't work for the first example and certainly won't work for
the second. Can you help me with this?

-- 
thanks!
 alien

.. Using The Bat! v3.5.26 on
.. Windows XP  5.1 Build  2600 - Service Pack 2