From f1bd72ffad9ccd24291625f9bd95bb287a787d3f Mon Sep 17 00:00:00 2001
From: Bram Matthys <syzop@vulnscan.org>
Date: Tue, 9 Mar 2004 23:14:20 +0000
Subject: [PATCH] pjoink

---
 spamfilter.conf | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/spamfilter.conf b/spamfilter.conf
index 0bb3c0077..4be4a8c3b 100644
--- a/spamfilter.conf
+++ b/spamfilter.conf
@@ -117,3 +117,10 @@ spamfilter {
 	action block;
 	reason "Infected by soex trojan: see http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FSOEX.A";
 };
+
+spamfilter {
+	regex "(^wait a minute plz\. i am updating my site|.*my erotic video).*http://.+/erotic(a)?/myvideo\.exe$";
+	target private;
+	action block;
+	reason "Infected by some trojan (erotica?)";
+};