> But if you're testing it with a live copy of the virus, > that's not the answer... Goodness no. I saved the attachment to disk and scanned it. F-prot sees it as a virus, Norton did NOT. But after looking into it again, it turns out that Norton had removed the virus from the attachement (since it integrates with Outlook) so the attachement from the machine that uses Norton actually no longer had the virus. Saving the attachement with the virus to a floppy and taking it there then scanning with Norton shows that Norton IS detecting the virus. --- James. -- http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist