[Exim] Snow White virus

Hi, a lot of our users have been recieving emails containing whats
labeled "The Snowwhite Virus".

Is there any way I can put filters in place using exim so that these
messages are automaticly trashed with out getting delivered?

They are all comming from the same address so I *could* use a rbl rule
and just block it, is this the best solution?

Thanks for your time