ehhh… am i correct if i understand you are saying that, it did not detect the attacment as virus in the beginning but did detect it later?