I have tried a couple of different SKIPIFVIRUSNAMEHAS variations without success:
SKIPIFVIRUSNAMEHAS W32/Sobig.F SKIPIFVIRUSNAMEHAS Sobig.F There is just one space betweent the SKIPVIRUSNAMEHAS and vulnerability. What is everyone else using? Also, for the next time, will the vulnerability name be what is reported by the %VIRUSNAME% variable or something else? Thanks, Steve --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.