require ["fileinto","reject","vacation","imapflags","relational","comparator-i;ascii-numeric","regex"];
if
anyof (header :contains "X-Amavis-Alert" "INFECTED",
header :contains "X-Amavis-Alert" "BANNED FILENAME")
{
discard;
stop;
}
if
header :contains "X-Spam-Flag" "YES"
{
fileinto "Spam";
stop;
}