# Verified SHA-1 checksums of spam files
#
# $Id: spam.txt 13581 2007-05-09 23:47:42Z cbiere $
#
# In order to filter all the listed items, this file must by copied
# or better symlinked to ~/.gtk-gnutella/spam.txt.
#
# Keep name patterns at the end of the file because gtk-gnutella < 0.96.4
# aborts parsing as soon as it sees unknown items.
#
# Recognized tags:
# NAME <case-sensitive extended regular expression>
# SIZE <number>|<minsize>-<maxsize>
# ADDED <ISO 8601 date>
# END
#

# ifreeclub dot com; visual noise; bogus results 
NAME [iI][fF][rR][eE][eE][cC][lL][uU][bB][.][cC][oO][mM]
ADDED 2007-01-09
END

# ifreeclub dot com and sharewarning; visual noise; bogus results 
NAME ^(FREE|WARNING|URGENT|GET.A.FREE|[.]).*-------------------------------
ADDED 2007-01-09
END

# Malware
NAME ^Secured.Downloading.[oO]f.*[wW]ith.[nN]ew.Secured.*zip$
SIZE 9000000-20000000
ADDED 2007-11-19
END

# RAZA/WMA spam
NAME ^[*].*[wW][mM][aA]$
ADDED 2008-01-16
END

# Virus fall-out; too small for a ZIP file (truncated)
NAME [.][zZ][iI][pP]$
SIZE 0-64
ADDED 2008-03-15
END

# Generated by WORM_VB.FKO (alias: Trojan-Downloader.Win32.VB.bbl)
# NOTE: Name patterns are case-sensitive, upper-case Z is intentional
NAME [.]Zip$
SIZE 97600-97699
ADDED 2008-03-16
END

