A different gnutella client program, however the examples also apply, I hope this helps a little: Virus thread: Typical virus spam file sizes - Make a note of them (click on blue link to see). Recognising various file sizes & some other tricks used by spammers helps greatly.