diff --git a/defaults/main.yml b/defaults/main.yml
index c81d5ef..48a84ba 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -32,8 +32,8 @@ server_scripts_detect_viruses_php_signatures:
   - 'eval(stripslashes'
   - 'FilesMan'
   - 'WSO_VERSION'
-  - '\$sF=\"PCT4BA6ODSE_\"'
-  - '\$qV=\"stop_\"'
+  - '\\\$sF=\"PCT4BA6ODSE_\"'
+  - '\\\$qV=\"stop_\"'
   - '=chr('
   - '\.chr(101'
   - 'b374k'