The %SUBFILE message in "ICAP header X-Virus-Details" messages change for each AV vendor.