IMON appending 4 notifications

[Pigitus]

The posts have been moved here from the Future changes to NOD32 thread because they are related to an issue which should be dealt with in a separate thread.

Blackspear,

You may want to add the suggestion below to the list of improvements:

Category: EMAILs
Suggestion: in each e-mail received, reduce the number of NOD32 messages from 4 to 1.

Specifically, I am referring to the messages that read like this:

"NOD32 1.965 .... Information/ This message was checked by NOD32 antivirus system part000.txt - is OK/ part001.htm - is OK /http://www.nod32.com "

Maybe there is a good reason for NOD32 to repeat the same message 4 times. But I don't see it.

[Blackspear]

{QUOTE-> ...reduce the number of NOD32 messages from 4 to 1.

Specifically, I am referring to the messages that read like this:

"NOD32 1.965 .... Information/ This message was checked by NOD32 antivirus system part000.txt - is OK/ part001.htm - is OK /http://www.nod32.com "

Maybe there is a good reason for NOD32 to repeat the same message 4 times. But I don't see it. <-QUOTE}I have never received such an email, it looks like there were several parts to the email.

Are you seeing this on EVERY email, or just some?

Cheers ;D

[Bandicoot]

{QUOTE-> Blackspear,

You may want to add the suggestion below to the list of improvements:

Category: EMAILs
Suggestion: in each e-mail received, reduce the number of NOD32 messages from 4 to 1.

Specifically, I am referring to the messages that read like this:

"NOD32 1.965 .... Information/ This message was checked by NOD32 antivirus system part000.txt - is OK/ part001.htm - is OK /http://www.nod32.com "

Maybe there is a good reason for NOD32 to repeat the same message 4 times. But I don't see it. <-QUOTE}
Hello Pigitus,

Could you send an email to support@eset.com explaining what you are seeing please? Perhaps I'm being dense but I don't quite understand what is happening with your notifications.

Thanks.
Bandicoot. :-\

[Pigitus]

Hello BlackSpear and Bandicoot,

NOD32 appends to each email that I receive 4 repetitions of the same message.

An example? WildersSecurity e-mailed me this morning to alert me that Bandicoot had replied to my post. At the end of the Wilders message was the following:

.

__________ NOD32 1.965 (20050106) Information __________

This message was checked by NOD32 antivirus system.
part000.txt - is OK

http://www.nod32.com



__________ NOD32 1.965 (20050106) Information __________

This message was checked by NOD32 antivirus system.
part000.txt - is OK

http://www.nod32.com


.

__________ NOD32 1.965 (20050106) Information __________

This message was checked by NOD32 antivirus system.
part000.txt - is OK

http://www.nod32.com



__________ NOD32 1.965 (20050106) Information __________

This message was checked by NOD32 antivirus system.
part000.txt - is OK

http://www.nod32.com



That's what I mean by 4 repetitions. I know I turned on the options to filter emails and to show it at the end of
each mail. But I did not expect a foursome repetition showing up. And the number is 4, it seems, for all mails that I receive.

The email software is Outlook Express with WinXP Pro SP1.

Regards

Pigitus

[ronjor]

See this thread. Post eight.

http://www.wilderssecurity.com/showthread.php?t=46600

[Bandicoot]

Hi folks,

Ronjor is partly correct in directing you to this previous post: The Notification Message is altered slightly. ie: this bit "part000.txt - is OK" is added. However, this shouldn't cause Pigitus to receive 4 notifications.

I think you have ticked "List all files" Pigitus, but that's OK. Are you using a spam filter? If the server settings are not altered in your email client then you would get double notifications. The reason is because the incoming email is scanned by IMON, sent to your spam filter, checked/filtered and passed on, scanned by IMON again before it is received by your email client. Hence 2 notifications. I suppose if you were actually running 2 spam filters it would cause 3 notifications....I don't know. Never tried it. Maybe your firewall is adding a notification too.

OK, before we go any further, could you either tell me if this is close to what's going on and we'll resolve it, or if we're well off base, can you send a HijackThis log file to support@eset.com please? (http://www.spywareinfo.com/%7Emerijn/downloads.html)

Thanks.
Bandicoot. ;D

[Pigitus]

Bandicoot,

Your insight was correct.

I use Choicemail to retrieve and filter mail from my ISP. Then Outlook retrieves the filtered mail from Choicemail. According to your approach this process means 2 tags.

The extra 2 tags can be explained this way. While IMON is on to filter mail, the real resident antivirus is Kaspersky (even though my trial version of Kaspersky claims to filter only from Outlook -- NOT OUTLOOK EXPRESS which is what I use.) Nevertheless, KAV has mail filtering on. When I turn KAV off, I only get 2 message tags, rather than 4.

This implies that the 2 steps that KAV undertakes to filter mail (first Choicemail, then OE) were checked by NOD32. And then NOD32 checks Choicemail then OE ON ITS OWN for another 2 tags.

This might have been the explanation. If so, problem is solved and this thread may be closed, as far as I am concerned.

THANKS !