spamfilter recipe alteration

I use a filter that looks like this:

####################################
# Pica.n worm
:0 H
* ^Subject: Here you have, ;o
{
    LOG='REJECT - new virus'

    :0
    /var/tmp/Pica.n-quarantine
}
###################################

In the above case, you can see I'm filtering out email with the `Here
you have, ;o' subject.  I'd like to make a similar filter, but I'd like
to filter a specific attachment instead of a specific subject (NakedWife.exe).

Could one of you please tell me how to alter the recipe I'm using
accordingly?  I know to rename the file that filtered email is saved as
in /var/tmp, and I know to change the log message, and I also know to
change the commented-out title of the filter.  It's the crucial working
line that I'm unsure how to edit.  Ahem.

Many thanks.
-- 
f i l b y  *  t e c h   s u p p o r t
  l                                 
  i 
  a
  n
  a
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail