The following instructions assume that you have setup messageinbound, and have the forum handler enabled. They also assume that you have setup and configured clamd + clamdscan on your system. Don't forget to specify the following in your config.php: $CFG->pathtoclam = '/usr/local/bin/clamdscan'; // Or wherever it is installed on you system $CFG->runclamonupload = true; Create a forum post and tick the 'Mail now' checkbox Run cron Check your e-mail Reply to the message you will have received about your new forum post Include the EICAR test file in your reply ( http://www.eicar.org/86-0-Intended-use.html ) Run cron Ensure that you were sent a notice about your infection Reply again, but this time with a non-infected file Run cron Ensure that the message was posted this time