IMON only scans Outlook, not Outlook Express

Discussion in 'NOD32 version 2 Forum' started by maxqc, Mar 20, 2005.

Thread Status:
Not open for further replies.
  1. maxqc

    maxqc Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    11
    I have NOD32 and it looks like it only scans Outlook mails, not OE ones.

    I use both software with differents adresses and I send EICAR to myself and when I received it in OE, no NOD message appeared..

    is it normal ?
     
  2. Robyn

    Robyn Registered Member

    Joined:
    Feb 1, 2004
    Posts:
    1,189
    I didn't realise this and would like to know also as I am about to install (in the next hour) NOD for my neighbour and they only have OE and I don't want to uninstall their current AV to find NOD is not scanning OE.
     
  3. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    Nod will scan OE with the on access scanner. ;)
     
  4. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    Nod32/IMON most certainly scans OE emails, and very effectively as well, thanks to its powerful heuristics...
     

    Attached Files:

    • Test.jpg
      Test.jpg
      File size:
      64.7 KB
      Views:
      1,577
  5. Robyn

    Robyn Registered Member

    Joined:
    Feb 1, 2004
    Posts:
    1,189
    I was so worried but thank you for explaining and also for the screenshot. I don't want to uninstall and find that NOD was not going to work with OE. Hopefully it will all go well now.

    Thanks
     
  6. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    You're welcome, glad to help. :)

    And maxqc, here's how IMON reacts when it encounters a (zipped) copy of the Eicar test file.

    I do suggest you check your settings...
     

    Attached Files:

  7. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    IMON integrates seamlessly with any mail client retrieving email via POP3 unless you use SSL. If you use a different port than 110, it must be specified in the IMON POP3 scanner setup for IMON to check email.
     
  8. Robyn

    Robyn Registered Member

    Joined:
    Feb 1, 2004
    Posts:
    1,189
    I have just installed for my friend - is it correct that NOD doesn't add 'checked by NOD32' to his e-mails when using OE?

    EDIT: :) it is working now sorry, wee panic there but all is well ;)
     
    Last edited: Mar 20, 2005
  9. maxqc

    maxqc Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    11
    NOD let me receive a message with eircar.com test file in the message... That is why I was wondering if it scans OE mails...
     
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Hi Maxqc,
    What port do you have specified in your mail client setup?
     
  11. maxqc

    maxqc Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    11
    110 for POP and 25 for SMTP... So it's ok ...

    I think it works because Outlook is protected ... Just dont know why it doesn't work with OE...
     
  12. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    I suggest you drop an email to support@eset.com with a link to this thread. Please enclose also a screenshot of your Outlook Express setup with the port number and POP3 server settings.
     
  13. Alec

    Alec Registered Member

    Joined:
    Jun 8, 2004
    Posts:
    355
    Location:
    Dallas, TX
    I know you are probably aware of the following and it probably isn't your problem, but I don't think anyone has expressly pointed it out in this thread yet, but...

    There are two different modules for scanning email: IMON and EMON. IMON scans the POP3/SMTP email, and EMON scans the MAPI email. It hasn't been asked yet, is your Outlook client configured to talk to an Exchange server or is it configured to support POP3/SMTP email? If it's configured for an Exchange server then you are using MAPI. Again, it's something you are probably already well aware of, but if you weren't it would definitely explain why Outlook might be working and Outlook Express would not be.
     
  14. maxqc

    maxqc Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    11
    My outlook uses Exchange and POP accounts.

    Yes, i'll mail Eset about this issue.

    ty anyway
     
  15. Mover

    Mover Registered Member

    Joined:
    Oct 1, 2005
    Posts:
    165
    What happens if you're using SSL and Outlook Express ?
     
  16. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,632
    from teh FAQ: "Since the SSL communication is encrypted, it is not possible for IMON to scan incoming email. Even adding port 995 to the list of ports checked by IMON would not work."
     
  17. mata7

    mata7 Registered Member

    Joined:
    Nov 8, 2005
    Posts:
    635
    Location:
    Mississauga, Canada
    Marco like that should be ok?
     

    Attached Files:

  18. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,632
    IMON does not scan SSL, adding port 995 doesnt do anything.
     
  19. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    It's impossible to scan SSL traffic at Winsock level. Otherwise it would not be a secure way of communicating and we all would be rich.
     
  20. Mover

    Mover Registered Member

    Joined:
    Oct 1, 2005
    Posts:
    165
    Hummm.... then how do we get around the problem of protecting our inbox from viruses if its coming thru SSL ? From what you're saying, its impossible.
     
  21. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    AMON (real-time file scanner) and make sure all mail is read as plain text (instead of HTML) and preview is off :)
     
  22. seamaiden

    seamaiden Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    65
    Location:
    Fresno, California, USA
    True or False?

    1. IMON scans the POP3/SMTP email from Outlook Express and other mail clients.

    2. IMON scans the POP3/SMTP email from Microsoft Outlook.

    3. EMON scans the POP3/SMTP and MAPI (IMAP) email through Microsoft Outlook.

    4. NOD32 does not support MAPI (IMAP) through any client other than Microsoft Outlook.

    5. If you do not use Microsoft Outlook for email (i.e., you only use Outlook for its Calendar or you do not use Outlook at all), then you do not need to have EMON enabled.

    6. IMON scans the NNTP news messages from Outlook Express and other news clients.
     
  23. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    True

    False, as far as I am aware this is the sole purpose of EMON.

    True and False, the false part is IMAP, this is NOT supported by Nod32.

    True and False, see above answer.

    True, but why fiddle with modules when you will not see any effect. It is better to leave it enabled should you or someone else change their mind in the future there is no need to remember to enable anything.

    True, False, how about no idea ;) :D

    Cheers :D
     
  24. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,729
    Location:
    Texas
    Amon scans these.
     
  25. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    IMON scans POP3 and HTTP traffic regardless of the mail client / browser used.

    IMON only scans POP3 traffic regardless of the mail client used (including MS Outlook)

    EMON communicates with MS Outlook via MAPI which means it will scan all emails received by MS Outlook regardless of the protocol used.

    EMON communicates via MAPI. With other mail clients than MS Outlook, IMAP communication will not be scanned. However, AMON would scan the attachments upon saving them to the disk.

    Right.

    As I've already mentioned above, IMON is only POP3/HTTP scanner so nope, NNTP messages are not scanned.
     
Thread Status:
Not open for further replies.