require ["fileinto"];
# rule:[SPAM]
if anyof (header :contains "X-Amavis-Alert" "BAD HEADER SECTION", header :contains "X-Spam-Level" "*", header :contains "Subject" "***SPAM***")
{
        fileinto "Junk";
        stop;
}
# rule:[VIRUS]
if header :contains "Subject" "***INFECTED***"
{
        fileinto "Junk";
        stop;
}