FYI: Regexp for F-Secure Anti-Virus for i386-linux Release 4.15 define(VIRUS_REGEX, '/Iinfection: (\S+)/'); Yes, it is logging with a big i in "Iinfection". I wonder why? I think the newer F-Secure versions loggs a bit different though... I love this new interface :-) Keep up the good work! / Carl