[Exim] needed: beagle/bagle pattern

someone on the list was nice to share a string pattern that blocked
sobig through exiscan a few months ago

has anyone come up with one for the beagle/bagle threat?

i tried using signatures from the perl File::Scan module, but that
didn't work out

i simply dont have enough time to install clam av or any other virus
scanner on the mail system, as much as I want to, and would like to
take as many preemptive measures as possible