To interested parties. I have confirmed with Julio Canto of Hispasec Sistemas that the engine in use on http://www.virustotal.com is not the latest and does not have all command line switches enabled for scanning files. .eml files as scanned by the /mailbox+ switch and the new /programs switch are not enabled. I've been told that such a parameter can be used from version 2.12.2, so by now I can't use it, but I've asked to get a more advanced engine from ESET to be able to use it Thanks again for the point. -- Regards, * Julio Canto * Hispasec Sistemas * http://www.hispasec.com Yes, I know it doesn't detect .eml files. VirusTotal has been designed for file scanning, so technically it doesn't have to work well with .eml files (although some engines work them well without been told). Anyway, I discussed the parameters I'm using now some moths ago with Palo and other NOD32-related people to know how they want me to use it (as I've done with the rest of the AV engines, it is important to use them the way they whant, you know).