Testsuite: case for malware= cmdline