Email attachment virus

MrCC · Trooper Joined: Mar 05, 2004 Posts: 10 Location: France

I am running a registered version of Mailwasher Pro (3.4.00) and Benign (1.42 Beta 1.4.2.1).
I use NOD32 AV.

Tonight I was alerted by NOD32 that an email with an attached zip file had Win32/Netsky.C worm, which attachment it then deleted for me.

Reading the words on Benign, I thought it was meant to strip out unsafe things in emails, or does this exclude attachments?

hamster · Posted: Tue Mar 30, 2004 6:20 pm Post subject:

You have NOD32 AV incoming mail scanning enabled then you may find that NOD32 AV is scanning first then Benign second.

Have you checked that you have Benign installed and running correctly.
http://www.firetrust.com/support/benign...ting#check

Have you added ZIP file types to your Benign Security profiles?
http://computercops.biz/postt7307.html

Check the NOD32 faq for POP3 configuration info
http://www.nod32.com/scriptless/support/ans/6e.htm

Others in the forum mention NOD32 and Benign http://computercops.biz/postlite2656-nod32.html

Please contact me at if you run into problems.

Regards
Hamish
Firetrust Support

MrCC · Trooper Joined: Mar 05, 2004 Posts: 10 Location: France

Thanks for all the info Hamish. I read through it, and I guess that leads to another question users need to answer, which is whether to let B9 or their AV handle incoming emails. I saw your comments on that.

The note from NOD32 on setting up their email scanner, re using proxy, change of settings (like B9 does) is interesting, mainly because I see nothing of that in my NOD32 program. Yet I have the trail version v2, it says it is up to date.
Also, their notes appear confusing, because they say if you have NOD32 installed OK, your system tray icon should be a 'red cross' one, mine is the green icon symbol. Anyway, that is an issue with them...

So do we just let B9 strip out attachments for us, and let the AV react when they are opened? ie. disable the AV email scanning? Seems like your recommendation.

tosbsas · Trooper Joined: Feb 27, 2003 Posts: 15 Location: Argentina

First: Where did you get the benign Beta??

Second: I am using Nod v2 with no porblem at all with benign - no special config necessary. Version 2 doesn't use a proxy

let me know how I can help

Ruben

MrCC · Trooper Joined: Mar 05, 2004 Posts: 10 Location: France

Ruben,
The Benign Beta came as a trial solution to a problem I was having with it not working sometimes with my email accounts. Tech Support got me to try the beta then, no problems since. I haven't checked, but I just presumed it was out by now.

Are you saying the pop3 NOD32 setup relates to v1 only? If that is the case, their documentation needs some serious updating. There is already a guide there to check if it is installed correctly, that says look for a 'red cross' systray symbol. Mine is green. Maybe v1 had a red cross?

Do you run both Benign and NOD32?

tosbsas · Trooper Joined: Feb 27, 2003 Posts: 15 Location: Argentina

MrCC · Trooper Joined: Mar 05, 2004 Posts: 10 Location: France

I've just changed my port on NOD32 to 9110 to try and stop the double stamp.

Thanks.

tosbsas · Trooper Joined: Feb 27, 2003 Posts: 15 Location: Argentina

actually nod is so easy to use - I had mayor work to do to get my friends avast work with benign, and can't use it with spampal and benign

Ruben

MrCC · Trooper Joined: Mar 05, 2004 Posts: 10 Location: France

" can't use it with spampal and benign"

Sorry, how do you mean you can't use NOD32 with Benign?

Confused...

tosbsas · Trooper Joined: Feb 27, 2003 Posts: 15 Location: Argentina

No, got me wrong - - can't use AVAST + Spampal + Benign

With Nod32 - no problem

Ruben


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 690 pages served in previous 5 minutes. Page Rendered: 0.613 seconds.