The "virustest" test evaluates to true if the normalized result string matches the value.
The normalized result string starts with a numeric value in the range "0" (zero) through "5", with meanings summarized below:
| Value | Interpretation |
|---|---|
| 0 | message was not tested for virustest |
| 1 | message contains no known viruses |
| 2 | message contained a known virus that was replaced with harmless content |
| 3 | message contained a known virus that was "cured" |
| 4 | message possibly contains a known virus |
| 5 | message definitely contains a known virus |