Yes thanks now its ok. What do I need to do to get the space detected in the name ? I have now the rule : if (($lc_fname eq 'joke.exe') || ($lc_fname eq 'sexy virgin.scr')){ return action_bounce("You have a virus on your machine. [W32/Hybris.gen\@MM virus]"); } joke.exe works great but sexy virgin.scr gets still through. Cheers J.P. ____________-- GIDS --____________