### Virus pattern
# Virus name \t pattern (regexp)
Nimda	cmd.exe\?/c\+dir|root.exe?/c\+dir
Code Red	/default.ida\?NNN
Code Red II	/default.ida\?XXX
Sadmin	cmd.exe \/c\+|root.exe \/c\+echo\+
SMTP connection	(\w+)\.(\w+):25
