just noticed that Avast also scans mail from other PC's on the LAN that are sending/receiving thru a proxy-program on the server running Avast ... the proxy does not use ports 25 & 110, but 8025 & 8110.
is that the new 'transparent' scanner at work ??
(btw ; i know i can use Avast itself as a mail proxy, looking into that too)