Julian - sorry to ask you directly but I suspect only you will know the answer :-) In what combination of circumstances is $message->{virusinfected} set? I have seen $message->{nameinfected} set and $message->{othereinfected} set, but never $message->{virusinfected} I'm trying to write a custom function and am a bit puzzled. TIA -- Clive