match and return virus name if found