I tested the email Eicar test file. ESS correctly found the infected attachment and deleted it. Under 'Action', the log file should state 'infected files deleted' instead of 'contained infected files.' I was having some stability problems with ESS with my system crashing and restarting. I sent minidumpfile to email@example.com. I removed ESS and reinstalled. Everything seems stable now. I am running Windows XP Home, SP2.