/^X-Spam-Virus:[\s\t]+yes[\s]+(.+)/     reject Virus identified $1
/^X-Spam-Status:[\s\t]+yes.*score=([0-9.]+).*required=([0-9.]+)/        reject Spam identified ($1/$2)