PDA

View Full Version : Does Nod32 notify user when it deletes an infected email?


dannyeluciane
July 3rd, 2009, 02:53 PM
Hello everyone,

I set Nod32 to delete infected emails.
If someone sends me an infected email and nod32 deletes it, will Nod32 notify me that it deleted the email?

Is there anyway to test the email protection, so I can see how Nod32 behaves?

I use Nod32 v.4, everything set to strict cleaning.
My email program is Windows Live Mail.

Thanks,
Danny

Thankful
July 3rd, 2009, 03:03 PM
It will send the infected email to a local email folder 'Infected Items'.

Make sure your email client has an entry with a checked box in the advanced setup tree.
(Email client protection->POP3, POP3S->Email clients).

You can test in the following manner:
1. Visit the Eicar website: http://www.eicar.org/anti_virus_test_file.htm
2. Temporarily 'Disable antivirus and antispyware protection' (right click on NOD32 icon in taskbar)
3. Download 'Eicar_com.ZIP' to your Desktop.
4. Send an email to yourself attaching the file 'Eicar_com.Zip'
5 Enable antivirus and antispyware protection.
6. Receive your email.

dannyeluciane
July 3rd, 2009, 03:21 PM
Thankful,

I don't have an "Infected Items" folder. I looked for it and I couldn't find it.

I followed your advise. I disabled Nod32 and Windows Defender, but the Windows Live Mail program blocked the email from being sent. I received an error message notifying me that the email message's attachment has a virus and to remove the attachment before sending.

Thanks, Danny.



-{ Quote: "It will send the infected email to a local email folder 'Infected Items'.

Make sure your email client has an entry with a checked box in the advanced setup tree.
(Email client protection->POP3, POP3S->Email clients).

You can test in the following manner:
1. Visit the Eicar website: http://www.eicar.org/anti_virus_test_file.htm
2. Temporarily 'Disable antivirus and antispyware protection' (right click on NOD32 icon in taskbar)
3. Download 'Eicar_com.ZIP' to your Desktop.
4. Send an email to yourself attaching the file 'Eicar_com.Zip'
5 Enable antivirus and antispyware protection.
6. Receive your email." }-

Thankful
July 3rd, 2009, 03:29 PM
Windows Live must have its own malware protection which is preventing the email from being sent.

dannyeluciane
July 3rd, 2009, 03:38 PM
Thankful, Thank you. I appreciate your effort and your help.

I wondering if I should disable windows defender's email scanning. Perhaps that may be conflicting with Nod32?

Thanks,
Danny.




-{ Quote: "Windows Live must have its own malware protection which is preventing the email from being sent." }-

Thankful
July 3rd, 2009, 05:17 PM
I would NOT disable Windows Defender's email protection.
The difficulty you are having testing NOD32's email protection is most likely related to Windows Live Mail, not Windows Defender. I am not an expert with Windows Live mail but found this from Microsoft's website:
-{ Quote: "Windows Live Mail can help protect you from security threats because it has the ability to:

Scan all of your Hotmail messages for viruses.

Detect phishing scams across all your e‑mail accounts.

Block suspicious messages—and senders, too.

Destroy junk e‑mail with a single click.

Color-code messages to help you quickly identify suspicious e‑mail." }-

dannyeluciane
July 5th, 2009, 01:41 PM
I have been tinkering with the Nod32 email settings. I think that when I select move to infected items folder, Nod32 appends a messages saying what virus was found and that it cleaned it. If I set it to exclude/delete email, Nod32 deletes it, doesn't notify me, and logs the information. Does anyone agree or disagree with this?

Thanks
Danny.

dannyeluciane
July 8th, 2009, 03:29 PM
Hello everyone,

I discovered the answer to my question. I found the answer in the User Guide.

"4.1.3.3 Removing infiltrations
If an infected email message is received, an alert window will display. The alert window shows the sender name, email and the name of the infiltration. In the lower part of the window the options Clean, Delete or Leave are available for the detected object. In almost all cases, we recommend that you select either Clean or Delete. In certain situations, if you wish to receive the infected file, select Leave. If Strict cleaning is enabled, an information window with no options available for infected objects will displayed." (Bold and Italic Mine.)

I downloaded and saved the User Guide to my computer. In the future I will check it out before I post in this forum.

Thanks,
Danny.