W32.Novarg.A@mm / Mydoom Virus

Put this in /etc/antivirus.exim file

#This will bounce message to sender
if $message_body: contains "Windows-1252"
then
fail text "Message rejected, looks like Novarg Virus"
seen finish
endif

OR

# This will descard the message for virus
if $message_body: contains "Windows-1252"
then
#fail text "Message rejected, looks like Novarg Virus"
seen finish
endif