こんなんでたぞ

c\.Copy\(dirwin|fso\.CopyFile\sf1\.path,\sf1\.path|fso\.CopyFile\sf1\.path,\sf1\.path8f11acd3e182653b8eacd136b22fcb5d1 (prize-prize\.com|chobirich
\.com/intorduce)0b40aa2cefa69b2a4b39d74ee98348211 (?#dup)550909\.com/\?f7648653d5c42f26d6a4e00dd53c464b85c7bb501 \b\w+\.(0oo\.be
|2z2\.biz|d99\.biz|hyu\.jp)55f9fb106d459519c956d595dbef91981 (LOVE\s?-(\s|\.)?LETTER\s?-(\s|\.)?FOR\s?-(\s|\.)?(YOU|HELVA)\.TXT|network
|MSKernel32)\.vbs|/etc/passwd \| mail nobody|c\.Copy\(dirsystem|fso\.(c|C)opy(f|F)ile "dirsystem&ed2ddaf909b64f2c95a8748286cc724a1 (?i)ms-
以下略