diff --git a/Changes b/Changes
index bed468b94..4ee43a60d 100644
--- a/Changes
+++ b/Changes
@@ -3183,3 +3183,6 @@ This is the 3.2 fixes branch.
   as the 'compiled for' (header) version. If they mismatch, UnrealIRCd could crash,
   so a big warning is posted if it happends.
 - Improved the above: made it work on windows and also added a check for curl.
+- spamfilter.conf: Added yet another sig for a site that causes Backdoor.Delf.lq
+  infection (reported by nexus), also changed LOI trojan and Bloodhound.Exploit.6
+  action to gline.
diff --git a/spamfilter.conf b/spamfilter.conf
index 53103e909..15de98991 100644
--- a/spamfilter.conf
+++ b/spamfilter.conf
@@ -149,7 +149,7 @@ spamfilter {
 spamfilter {
 	regex ".*(http://jokes\.clubdepeche\.com|http://horny\.69sexy\.net|http://private\.a123sdsdssddddgfg\.com).*";
 	target private;
-	action block;
+	action gline;
 	reason "Infected by LOI trojan"; /* Name is still unsure */
 };
 
@@ -179,5 +179,12 @@ spamfilter {
 	regex "^www\.fun-pix\.tk/blub_fish\.jpg <-{6} lo{11}l$";
 	target channel;
 	reason "Infected by Bloodhound.Exploit.6: see http://securityresponse.symantec.com/avcenter/venc/data/bloodhound.exploit.6.html";
-	action block;
+	action gline;
+};
+
+spamfilter {
+     regex "Free porn pic and movies (www\.sexymovies\.da\.ru|www\.girlporn\.org)";
+     target private;
+     reason "Unknown virus. Site causes Backdoor.Delf.lq infection";
+     action block;
 };