MSRE - "Virus:" keyword can only be at start of rule