F-Secure Anti-Virus for Workstations

[Smokey]

Without doubt F-Secure Anti-Virus for Workstations v5.41 is a top-notch AV, but what about handling email malware? ::)

I can't find anything about F-Secure for Windows in conjunction with email... ???

[wizard]

As F-Secure uses the KAV engine it should be able to scan also inside the databases of most email clients. But as often explained before email scanning is not really important for malware protection.

wizard

[Patrice]

Hi Smokey,

-{ Quote: " quoting: wizard link=board=24;threadid=9605;start=0#msg62910 date=1053861603]But as often explained before email scanning is not really important for malware protection." }-

I agree to the statement of wizard, but let's say for the average user it's a nice protection if the email is scanned either inbound or outbound. Most of the users normally don't save the attachment first to their harddisk and open it afterwards... :( But if you are more than a average user, you will take the necessary steps concerning your emails. Then wizard's statement is fully correct.

KAV doesn't have this support (email protection) yet included unfortunately. But as far as I know the version 5 will have it included! ;)

Regards,

Patrice

[_anvil]

-{ Quote: " Most of the users normally don't save the attachment first to their harddisk and open it afterwards..." }-

That doesn't matter as long as the on-access monitor is active. It is impossible to start an infected mail attachment while the monitor is running, because every attachment is placed on HD before execution - and here the monitor 'jumps in.' :)
Mail database formats are very similar to archives (zip, rar,...), which are no real problem for your security either (as often discussed before.)

So, as long as your AV guard is running, e-mail scanning is needless for your protection. :)

[wizard]

-{ Quote: " quoting: Patrice link=board=24;threadid=9605;start=0#msg62916 date=1053863404]
I agree to the statement of wizard, but let's say for the average user it's a nice protection if the email is scanned either inbound or outbound." }-

Outbound scanning is even more hype. That would mean your system is infected and the worm is now spreading. So if the on access scanner would not have prevent this how can the email scanner?

-{ Quote: "Most of the users normally don't save the attachment first to their harddisk and open it afterwards... :(" }-

Even if you run the attachment from your email client the a good on-access scanner will prevent the execution of the malware.

-{ Quote: "KAV doesn't have this support (email protection) yet included unfortunately." }-

KAV offers the scan of email databases. Different approach but as effective as pop3 scan. :)

wizard

[Smokey]

-{ Quote: " quoting: wizard link=board=24;threadid=9605;start=0#msg62910 date=1053861603]
As F-Secure uses the KAV engine it should be able to scan also inside the databases of most email clients.
wizard
" }-

Hi Wizard and all others!

Thanks for the points of view about F-Secure for Workstations in conjunction with email! :)

[Pilli]

Yep, Get a copy of EICAR test virus: http://www.rexswain.com/eicar.html off the net and try to send it & KAV will first tell you that the email has an attched virus & then ask again if you really want to send it ;D Not sure if this happens in F-Secure

[Patrice]

Hi _anvil & wizard,

thank for your answers, you are completely right! ;)

-{ Quote: " quoting: wizard link=board=24;threadid=9605;start=0#msg62939 date=1053874085]Outbound scanning is even more hype." }-

Absolutely correct!

-{ Quote: " quoting: wizard link=board=24;threadid=9605;start=0#msg62939 date=1053874085]Even if you run the attachment from your email client the a good on-access scanner will prevent the execution of the malware." }-

Yes, that's true. I was more thinking about worms like "I Love You" or "Melissa". If they would have saved it on the harddisk, they would have seen, that it has multiple file extensions (txt.vbs). Inside the mail application (most of them use Outlook -for a business company it's still the best to use) you don't see that. ;)

Best regards,

Patrice