Quarantine Exclusions

I am running Nod 32 on Vista Ultimate with the following installed components:

Virus signature database: 2921 (20080304)
Update module: 1023 (20080229)
Antivirus and antispyware scanner module: 1107 (20080303)
Advanced heuristics module: 1070 (20080212)
Archive support module: 1073 (20080229)
Cleaner module: 1026 (2008022

In addition I run Outlook 2007 and the Outlook Connector for Windows Live Mail. Every time Outlook tries to sync with Live Mail Nod 32 blocks and quarantines the following file:

http://bl121ds......mail.services.live.com/DeltaSync_v2.0.0/Sync.aspx

Nod 32 seems to think the program is adware, but I believe it to be part of the syncronization process between Outllok and Live Mail. How can I get Nod 32 to ignore this file and this file only. I don't want give mail.services.live.com a free pass to send me anything, but I want this file to run.

 

Could you please encrypt the file as RAR, protect the archive with the password "infected" and submit it to samples[at]eset.com with this thread's url in the subject?

 

I have submitted this file via the internal process in Nod 32. I cannot get the file to restore to my hard drive to be encrypted with RAR. Nod 32 deletes it every time.

 

Turned off protection to zip the file. I don't do RAR (don't want to buy WinRAR to compress 1 file a year, don't want to crap up my hd with shareware). Surely you guys can figure out how to open an encrypted zip file. Password is infected.

 

Consider temporarily disabling protection so you can accomplish the encryption\upload and at the same time add the file to exclusions. Then re-enable protection.

 

There is a lot to like about Nod 32. It's lightweight, unobtrusive and (for the most part) it works. But my trial version is about to run out and obviously I'm not going to buy if it won't let me run Outlook Connector.

 

I got a response from Eset customer service after I submitted the file Sync.aspx via the internal method in Nod 32. They said I should update the anti-virus database and see if I still got the error.

I can't update the database because the system thinks it already up to date.

 

Thank you.

Now running Virus signature database: 2932 (20080309) and it is not blocking hotmail sync.

Buying now.

 

WinRar isn't the only option for Rar's by the way.

Use 7-Zip.

FYI.

 

letest is
Virus signature database: 3026 20080414
Update module: 1023 20080229
Antivirus and antispyware scanner module: 1108 20080325
Advanced heuristics module: 1070 20080212
Archive support module: 1075 20080314
Cleaner module: 1026 20080228

 

7-zip rocks. Too bad it doesn't do lame ACE files but hey, it's only about 1000000x faster than Windows internal ZIP routines, espeically on archives with MANY files inside.

Go freeware!