In the case of the Eicar zip files (downloaded from the SSL links) they are not scanned when unpacked, unless I have ‘Scan All Files’ ticked. Even Eicar.com is not caught when it’s written to disk without ‘Scan All Files’. So, sure, zip files don’t need to be scanned - I accept that. I do however want the contents scanned before executing anything. You say that should happen - well, it seems not by default.