NIS 2012 keeps indicating a threat previously fixed

NIS found a Thunderbird email attachment when it scanned the inbox. It shows as a threat. If I fix it with NIS it deletes the whole Inbox file, which is not very helpful. So I found the email message with the attachment and deleted the email and attachment. I then emptied my email Trash folder, and compacted the Inbox which should get rid of anything that might remain hidden.

 

At the next Scan NIS reports the same attachment with a virus. I then used some tools to grep the inbox. Previously it had found the name of the reported attachment (report.zip, containing report.exe). Now it finds nothing. Yet NIS continues to report the virus is there on every scan.

 

So why does NIS keeps thinking there is a virus in the Inbox? Does it remember it found it before and I did not 'fix' it?

 

Any ideas would be much appreciated!

 

Thanks!