# ¯f¬r¹LÂo¾¹
#SirCam Virus
:0 Bh  
* I send you this file in order to have your advice
/home/mailfilter/virus

#Nimda Virus
:0 Bh
* ^Content-Type: audio/x-wav;
* name="readme.exe"
#| formail -b -f -A "$trash_header ordinary tag-contents body Nimda worm"
/home/mailfilter/virus

#New Nimda Virus
:0 Bh
* ^Content-Type:.*audio/x-wav.*
* name="sample.exe"
#| formail -b -f -A "$trash_header ordinary tag-contents body Nimda worm"
/home/mailfilter/virus

#New Virus
:0 Bh
* new photos from my party!
/home/mailfilter/virus

#Yerner Virus
:0 Bh
* ^Content-Type:.*audio/x-wav.*
* name="yawsetup.exe"
/home/mailfilter/virus

# janpan 20020420
:0 Bh
* name="Patch.exe"*
/home/mailfilter/virus

# W32.MyLife@mm 20020408
:0 BHh
* ^Subject:.*my life ohhhhhhhhhhhhh *
* ^Content-Type:.*audio/x-wav.*
* name="My Life.scr".*
* How are youuuuuuuu? look to the digital picture it's my love * 
/home/mailfilter/virus

#W32.Hunch.C@mm 20020416
:0 Bh
* Tal como te prometi; te envio mi foto en el archivo adjuncto...*
/home/mailfilter/virus

# W32.HLLP.Sharpei@mm 20020416
:0 BHh
* ^Subject:.*Important: Windows update *
* ^Content-Type:.*audio/x-wav.*
* name="Ms02-010.exe"
* Hey, at work we are applying this update because it makes. Windows over 50% faster and more secure. I thought I should forward it as you may like it.
/home/mailfilter/virus

# W32.MyLife@mm (1)20020416
:0 BHh
* ^Subject:.*sexyy Screen Saver *
* ^Content-Type:.*audio/x-wav.*
* name="USA.scr"
* look to the screen saver it's very funny *
/home/mailfilter/virus

# W32.MyLife@mm (2)20020416
:0 BHh
* ^Subject:.*funny Screen Saver *
* ^Content-Type:.*audio/x-wav.*
* name="Sh.scr".*
* look to the 3D screen saver it's very funny * 
/home/mailfilter/virus

# W32.Klez.H@mm (1) 20020420
:0 Hh
* ^Subject:.*(how are you|let's be friends|darling|so cool a flash,enjoy it|your password|honey|some questions|please try again|welcome to my hometown|the Garden of Eden|introduction on ADSL|meeting notice|questionnaire|congratulations|sos!|japanese girl VS playboy|look,my beautiful girl friend|eager to see you|spice girls' vocal concert|japanese lass' sexy pictures) *
/home/mailfilter/virus

# W32.Klez.H@mm (2) 20020420
:0 Hh
* ^Subject:.*a (new|funny|nice|humour|excite|good|powful|WinXP|IE 6.0|W32.Elkern|W32.Klez.E|Symantec|Mcafee|F-Secure|Sophos|Trendmicro|Kaspersky) (new|funny|nice|humour|excite|good|powful|WinXP|IE 6.0|W32.Elkern|W32.Klez.E|Symantec|Mcafee|F-Secure|Sophos|Trendmicro|Kaspersky) (game|tool|website|patch) *
/home/mailfilter/virus

# W32.Klez.H@mm (3) 20020420
:0 Hh
* ^Subject:.*(Undeliverable|Returned) mail--\"(new|funny|nice|humour|excite|good|powful|WinXP|IE 6.0|W32.Elkern|W32.Klez.E|Symantec|Mcafee|F-Secure|Sophos|Trendmicro|Kaspersky)\" *
/home/mailfilter/virus

# W32.Klez.H@mm (4) 20020420
:0 Hh
* ^Subject:.*(new|funny|nice|humour|excite|good|powful|WinXP|IE 6.0|W32.Elkern|W32.Klez.E|Symantec|Mcafee|F-Secure|Sophos|Trendmicro|Kaspersky) removal tools *
/home/mailfilter/virus

# XP Virus
:0 Hh
* ^Subject:.*A  WinXP patch *
/home/mailfilter/virus

# WORM_HORSMAN.A
:0 Hh
* ^Subject:.*Very important patch! *
/home/mailfilter/virus