> > Maybe someone can check this with other AV-scanners like Dr.Web or Sophos. > DrWeb stops it. I even sent a zipped version of eicar test via Outlook RTF. drweb v 4.28 avcheck v 0.7 postfix 1.1.7 lookout 2000 --Kapp