IMON appending 4 notifications

Discussion in 'NOD32 version 2 Forum' started by Pigitus, Jan 10, 2005.

Thread Status:
Not open for further replies.
  1. Pigitus

    Pigitus Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    97
    Location:
    USA
    Re: Future Changes to Nod32

    The posts have been moved here from the Future changes to NOD32 thread because they are related to an issue which should be dealt with in a separate thread.

    Blackspear,

    You may want to add the suggestion below to the list of improvements:

    Category: EMAILs
    Suggestion: in each e-mail received, reduce the number of NOD32 messages from 4 to 1.

    Specifically, I am referring to the messages that read like this:

    "NOD32 1.965 .... Information/ This message was checked by NOD32 antivirus system part000.txt - is OK/ part001.htm - is OK /http://www.nod32.com "

    Maybe there is a good reason for NOD32 to repeat the same message 4 times. But I don't see it.
     
    Last edited by a moderator: Jan 10, 2005
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Re: Future Changes to Nod32

    I have never received such an email, it looks like there were several parts to the email.

    Are you seeing this on EVERY email, or just some?

    Cheers :D
     
  3. Bandicoot

    Bandicoot Eset Staff

    Joined:
    Mar 23, 2004
    Posts:
    297
    Location:
    California
    Re: Future Changes to Nod32

    Hello Pigitus,

    Could you send an email to support@eset.com explaining what you are seeing please? Perhaps I'm being dense but I don't quite understand what is happening with your notifications.

    Thanks.
    Bandicoot. :doubt:
     
  4. Pigitus

    Pigitus Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    97
    Location:
    USA
    Re: Future Changes to Nod32

    Hello BlackSpear and Bandicoot,

    NOD32 appends to each email that I receive 4 repetitions of the same message.

    An example? WildersSecurity e-mailed me this morning to alert me that Bandicoot had replied to my post. At the end of the Wilders message was the following:

    .

    __________ NOD32 1.965 (20050106) Information __________

    This message was checked by NOD32 antivirus system.
    part000.txt - is OK

    http://www.nod32.com



    __________ NOD32 1.965 (20050106) Information __________

    This message was checked by NOD32 antivirus system.
    part000.txt - is OK

    http://www.nod32.com


    .

    __________ NOD32 1.965 (20050106) Information __________

    This message was checked by NOD32 antivirus system.
    part000.txt - is OK

    http://www.nod32.com



    __________ NOD32 1.965 (20050106) Information __________

    This message was checked by NOD32 antivirus system.
    part000.txt - is OK

    http://www.nod32.com



    That's what I mean by 4 repetitions. I know I turned on the options to filter emails and to show it at the end of
    each mail. But I did not expect a foursome repetition showing up. And the number is 4, it seems, for all mails that I receive.

    The email software is Outlook Express with WinXP Pro SP1.

    Regards

    Pigitus
     
  5. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,772
    Location:
    Texas
  6. Bandicoot

    Bandicoot Eset Staff

    Joined:
    Mar 23, 2004
    Posts:
    297
    Location:
    California
    Re: Future Changes to Nod32

    Hi folks,

    Ronjor is partly correct in directing you to this previous post: The Notification Message is altered slightly. ie: this bit "part000.txt - is OK" is added. However, this shouldn't cause Pigitus to receive 4 notifications.

    I think you have ticked "List all files" Pigitus, but that's OK. Are you using a spam filter? If the server settings are not altered in your email client then you would get double notifications. The reason is because the incoming email is scanned by IMON, sent to your spam filter, checked/filtered and passed on, scanned by IMON again before it is received by your email client. Hence 2 notifications. I suppose if you were actually running 2 spam filters it would cause 3 notifications....I don't know. Never tried it. Maybe your firewall is adding a notification too.

    OK, before we go any further, could you either tell me if this is close to what's going on and we'll resolve it, or if we're well off base, can you send a HijackThis log file to support@eset.com please? (http://www.spywareinfoforum.com/~merijn/downloads.html)

    Thanks.
    Bandicoot. :D
     
  7. Pigitus

    Pigitus Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    97
    Location:
    USA
    Bandicoot,

    Your insight was correct.

    I use Choicemail to retrieve and filter mail from my ISP. Then Outlook retrieves the filtered mail from Choicemail. According to your approach this process means 2 tags.

    The extra 2 tags can be explained this way. While IMON is on to filter mail, the real resident antivirus is Kaspersky (even though my trial version of Kaspersky claims to filter only from Outlook -- NOT OUTLOOK EXPRESS which is what I use.) Nevertheless, KAV has mail filtering on. When I turn KAV off, I only get 2 message tags, rather than 4.

    This implies that the 2 steps that KAV undertakes to filter mail (first Choicemail, then OE) were checked by NOD32. And then NOD32 checks Choicemail then OE ON ITS OWN for another 2 tags.

    This might have been the explanation. If so, problem is solved and this thread may be closed, as far as I am concerned.

    THANKS !
     
Thread Status:
Not open for further replies.