In one embodiment, an antivirus system logs in-transit e-mails in a computer network. Upon receipt of an updated pattern file for an antivirus scan engine, the log may be checked to determine if the computer network has been exposed to a computer virus identified in the updated pattern file. If so, antivirus actions, such as antivirus scanning of a client computer that has been infected by the virus, may be remotely initiated.