I wonder if anyone has any ideas about this problem: My NOD32 IMON (POP3 email scanner) behaves correctly on winME, but not on win2000. When a virus attachment arrives (e.g. eicar) I am prompted by NOD32 and I select the "RENAME" option. Under winME three things happen next: 1) The attachment is renamed (e.g. from eicar.com to eicar.vcom) 2) the Subject: header is changed, e.g to: [virus Eicar test file] testing with eicar.com 3) AND the following is inserted into the message: > __________ NOD32 1.789 (20040614) Notification __________ > > Warning: NOD32 antivirus system found the following > infiltrations in the message: > eicar.com - Eicar test file - renamed to eicar.vcom > > http://www.nod32.com So far so good. BUT the problem is that under win2000, only action (1) occurs. (Fortunately, that is the most important one, but I still want the other actions too.) I get the same behavior whether or not the user is Administrator. My mailer is Mozilla Thunderbird 0.5 . This is a dual boot, so everthing but the O/S is completely identical. Any ideas?