[exim] need some help with a cmdline virus scanner def

I have setup in my exim.conf file

av_scanner = cmdline:/usr/local/bin/esets_cli --subdir %s:* : virus= : "(+.)"

i've tried different permutations but still can;t seem to get it to work.

ACL
deny message = This message contains malware ($malware_name)
     demime = *
     malware = *

the output on the commandline is as follows

/usr/local/bin/esets_cli --subdir /home/*
/usr/home/eicar.zip: action="discarded"
/usr/home/eicar.zip: virus="Eicar test file"
/usr/home/eicar.zip >> ZIP >> eicar.com: virus="Eicar test file"

So I should be seeing in my exim logs a line that says This message contains malware Eicar test file and the deny. But all I get is

9805 check demime = *
9805 check malware = *
9805 deny: condition test failed
9805 processing "accept"
9805 accept: condition test succeeded
9805 unspool_mbox(): unlinking '/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8.eml'
9805 unspool_mbox(): unlinking '/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8-00000.com'
9805 unspool_mbox(): unlinking '/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8-00001.com'
9805 unspool_mbox(): unlinking '/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8-00000.zip'
9805 unspool_mbox(): unlinking '/var/spool/exim/scan/1MaoZ2-0002Y9-G8/1MaoZ2-0002Y9-G8_scanner_output'
9805 calling local_scan(); timeout=300
9805 local_scan() returned 0 NULL

I am pretty sure it is because of the definiton in the av_scanner. Can someone maybe help me with av_scanner definition.

Thanks in advance.....

_________________________________________________________________
Get free photo software from Windows Live
http://www.windowslive.com/online/photos?ocid=PID23393::T:WLMTAGL:ON:WL:en-US:SI_PH_software:082009