It seems that ktnef *does* extract the file eicar.com from the winmail.dat test 14. It is not impossible that the reason is that ktnef doesn't check the checksum and thus it gets around that. Anyway the point is I'm going to see if I can find the souce to ktnef and examine it (provided it isn't the same mess as the rest of the KDE source...)
-Nigel _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
