# procmailrc file for detecting bogus virus warnings # postfix to procmail conversion by Peter Jensen # # usage: put INCLUDERC=/path/to/this/file in your procmailrc # # SpamAssassin to postfix conversion by Niels Callesře (dk pfy) pfy@nntp.dk # original compilation by Tim Jackson for SpamAssassin # http://www.timj.co.uk/linux/bogus-virus-warnings.cf DESTINATION=$HOME/mail/stupid_scanner :0 D * ^Subject: \{Virus\?\} $DESTINATION :0 D * ^Subject: Virus Detected by Network Associates, Inc\. Webshield $DESTINATION :0 D * ^Subject: ---- Virus Detected ----$ $DESTINATION :0 D * ^Subject: Virus detected$ $DESTINATION :0 D * ^Subject: Virus Alert$ $DESTINATION :0 D * ^Subject: InterScan NT Alert$ $DESTINATION :0 D * ^Subject: Virus found in the message$ $DESTINATION :0 D * ^Subject: Message quarantined$ $DESTINATION :0 D * ^Subject: VIRUS ALERT! $DESTINATION :0 D * ^Subject: Virus found in e-mail \( $DESTINATION :0 D * ^Subject: MDaemon Warning - Virus Found $DESTINATION :0 D * ^Subject: Warning: E-mail viruses detected$ $DESTINATION :0 D * ^Subject: ScanMail Message: To Sender virus found $DESTINATION :0 D * ^Subject: Norton Anti ?Virus detected $DESTINATION :0 D * ^Subject: VIRUS .*IN YOUR MAIL$ $DESTINATION :0 D * ^Subject: Antigen found VIRUS $DESTINATION :0 D * ^Subject: Filter incident$ $DESTINATION :0 D * ^Subject: Vírus figyelmeztetés! Virus warning!$ $DESTINATION :0 D * ^Subject: Symantec AVF detected $DESTINATION :0 D * ^Subject: Returned due to virus; $DESTINATION :0 D * ^Subject: Anti-Virus Notification $DESTINATION :0 D * ^Subject: BANNED FILENAME .*IN MAIL FROM YOU $DESTINATION :0 D * ^Subject: File blocked - ScanMail for Lotus $DESTINATION :0 D * ^Subject: NAV detected a virus $DESTINATION # broader expression below :0 D * ^Subject: VIRUS .+ IN MAIL FROM YOU $DESTINATION :0 D * ^Subject: Virus Notification: $DESTINATION :0 D * ^Subject: Virus found in a message you sent $DESTINATION :0 D * ^Subject: Virus found in sent message $DESTINATION :0 D * ^Subject: VIRUS EN SU CORREO $DESTINATION :0 D * ^Subject: Warning: antivirus system report$ $DESTINATION :0 D * ^Subject: MDaemon Notification -- Attachment Removed$ $DESTINATION :0 D * ^Subject: Information - Antivirus$ $DESTINATION :0 D * ^Subject: Symantec AntiVirus detected a violation $DESTINATION :0 D * ^Subject: WARNING: YOU WERE SENT A VIRUS $DESTINATION :0 D * ^Subject: SAV detected a violation in a document $DESTINATION :0 D * ^Subject: MailMarshal has detected a suspect attachment $DESTINATION :0 D * ^Subject: A virus was detected in your mail $DESTINATION :0 D * ^Subject: Recipient Virus-alert $DESTINATION :0 D * ^Subject: Virus Found in message $DESTINATION :0 D * ^Subject: E-?mail viruses detected $DESTINATION :0 D * ^Subject: Undelivered mail: VIRUS FOUND $DESTINATION :0 D * ^Subject: Quarantined Mail: virus from $DESTINATION :0 D * ^Subject: Attenzione Virus $DESTINATION :0 D * ^Subject: \[MailServer Notification\]To Sender virus found $DESTINATION :0 D * ^Subject: virus in verschickter Nachricht gefunden $DESTINATION :0 D * ^Subject: MailMarshal has detected a Virus in your message $DESTINATION :0 D * ^Subject: Virus encontrado en el mensaje enviado $DESTINATION :0 D * ^Subject: Security Alert - ScanMail for Lotus Notes $DESTINATION :0 D * ^Subject: Virus Infection Alert $DESTINATION :0 D * ^Subject: Warning - Virus Detected: $DESTINATION :0 D * ^Subject: Skynet Mail Protection scan results $DESTINATION :0 D * ^X-BLTSYMAVREINSERT $DESTINATION :0 D * ^X-Virus-Scan-Result: Repaired $DESTINATION :0 D * ^X-.*-MailScanner: Found to be infected $DESTINATION :0 D * ^X-Scanned: Symantec Antivirus Scan - Virus found $DESTINATION :0 D * ^X-Sender: NetMail AntiVirus Agent $DESTINATION :0 D * ^X-Auto-Generated: Sophos antivirus plugin $DESTINATION # Contributed by "Safari" in n.a.n-a.e :0 D * ^Subject: Virusveszely! Virus warning! $DESTINATION :0 D * ^Subject: Virus in mail from you\. $DESTINATION :0 D * ^Subject: Virus infection notice $DESTINATION :0 D * ^Subject: Possible virus found in message you sent $DESTINATION :0 D * ^Subject: AntiVir ALERT $DESTINATION :0 D * ^Subject: Centrale Anti-Virus melding $DESTINATION :0 D * ^Subject: Vexira ALERT $DESTINATION :0 D * ^X-ELTE-VirusStatus: was_infected $DESTINATION # contributed by B Briggs in n.a.n-a.e :0 D * ^Subject: You sent potentially unsafe content $DESTINATION # contributed by Lars Stokholm in d.a.n :0 D * ^Subject: Hov, du har sendt Jubii en virus !!!$ $DESTINATION # contributed by Niels Callesře's inbox :0 D * ^Subject: \[message from .*virus detect system\]$ $DESTINATION :0 D * ^Subject: Net Integrator Virus Alert$ $DESTINATION :0 D * ^Subject: Information - Antivirus$ $DESTINATION :0 D * ^Subject: AntiVirus Alert!$ $DESTINATION :0 D * ^Subject: \{ALERTA DE VIRUS\} $DESTINATION :0 D * ^Subject: Virus in una mail per lei $DESTINATION :0 D * ^Subject: .*AntiVirus scan results $DESTINATION # Personal mailbox :0 D * ^Subject: Virus detected in message$ $DESTINATION :0 D * ^Subject: \{VIRUS\?\} $DESTINATION :0 D * ^Subject: F-Secure Anti-Virus for Internet Mail Notification \(includes $DESTINATION :0 D * ^Subject: \[VIRUS REMOVED\] $DESTINATION