Re: Virus testing

2002-11-30 Thread 3w
Friday, November 29, 2002, 1:05:05 PM, you wrote: MDP>> AV scanner that real-time scan non-malicious temp files in this way MDP>> are a PITA for TB. TB is trying to download a message and, before it MDP>> can even look at it, the AV software has poked its nose where it MDP>> needn't. The rug has b

Re: Virus testing

2002-11-29 Thread Thomas Fernandez
Hello Michael, On Fri, 29 Nov 2002 06:05:05 -0600 GMT (29/11/02, 19:05 +0700 GMT), Michael Disabato wrote: > There is a fourth choice if your VS supports it. Use it as a proxy to > get to your POP3 account. Trend Micro's PCCillin does this. I have to > enter the POP3 Server as localhost/servernam

Re: Virus testing

2002-11-29 Thread Michael Disabato
Friday, November 15, 2002, 6:24:20 PM, Marck scribbled: MDP> -BEGIN PGP SIGNED MESSAGE- MDP> Hash: SHA1 MDP> Hi 3w, MDP> @16-Nov-2002, 01:04 +0100 (00:04 UK time) 3w [3] in MDP> [EMAIL PROTECTED]">mid:[EMAIL PROTECTED] said: 3>> Any suggestions? MDP> I really must put this on the FAQ.

Re: Virus testing

2002-11-16 Thread Dierk Haasis
Hello Allie! On Saturday, November 16, 2002 at 12:06:48 PM you wrote: > Especially if you use IE's engine, as I do. I'd prefer not to, but > it has the rendering engine that works best for me. Wait for the final of Opera 7; after some early annoyances in the current beta, I had, I am now convinc

Re: Virus testing

2002-11-16 Thread 3w
Saturday, November 16, 2002, 10:57:25 AM, you wrote: >> (I know you guys prefer names instead of nicknames, so I'll switch) > Since when? Well some of this list nicely 'reminded' me in doing so. But hey, if it's not a problem for you - it ain't one for me! ;-) cu, 3w _

Re: Virus testing

2002-11-16 Thread Allie C Martin
In <[EMAIL PROTECTED]">mid:[EMAIL PROTECTED]>, Dierk Haasis [DH] wrote:' >> Nowadays, it's a good idea to keep a realtime scanner running. DH> Not for me (since this is a matter of taste I won't go into it DH> any further). Hmmm. It's my personal preference not to run one as well, and I did just

Re: Virus testing

2002-11-16 Thread Dierk Haasis
Hello Allie! On Saturday, November 16, 2002 at 11:23:45 AM you wrote: > Also all decent ones I've used allows you to be able to exclude > directories and particular file-types from real-time scanning. F-Secure has this. I forgot - and can't find it at the moment -, is there an option within TB t

Re: Virus testing

2002-11-16 Thread Allie C Martin
In <[EMAIL PROTECTED]">mid:[EMAIL PROTECTED]>, Dierk Haasis [DH] wrote:' DH> Since this new notebook is fast enough and not at all hurt by DH> the good old resource trouble I let it go - or I have to think DH> of disabling the real-time scanner every time I load F-Secure DH> (at start-up of Window

Re: Virus testing

2002-11-16 Thread Dierk Haasis
Hello Marck! On Saturday, November 16, 2002 at 1:24:20 AM you wrote: > AV scanner that real-time scan non-malicious temp files in this way > are a PITA for TB. Sadly with some AV scanners real-time scanning becomes the standard. I just purchased the newest from F-Secure (now with three scan engi

Re: Virus testing

2002-11-16 Thread Dierk Haasis
Hello 3w! On Saturday, November 16, 2002 at 8:09:24 AM you wrote: > He said I should open a thread on fox.wikis.com (he's the creator of > that site) so more people can see that there are other things than M$ > to use in terms of mail. Well then let's do that. :-) Nice to hear. > (I know you gu

Re: Virus testing

2002-11-15 Thread 3w
Saturday, November 16, 2002, 1:24:20 AM, you wrote: > AV scanner that real-time scan non-malicious temp files in this way > are a PITA for TB. TB is trying to download a message and, before it > can even look at it, the AV software has poked its nose where it > needn't. The rug has been well and t

Re: Virus testing

2002-11-15 Thread Marck D Pearlstone
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi 3w, @16-Nov-2002, 01:04 +0100 (00:04 UK time) 3w [3] in mid:1244294785.20021116010418@;ewanet.ch said: 3> Any suggestions? I really must put this on the FAQ. AV scanner that real-time scan non-malicious temp files in this way are a PITA for TB.

Re: Virus testing

2002-11-15 Thread Roelof Otten
Hallo 3w, On Sat, 16 Nov 2002 01:04:18 +0100GMT (16-11-02, 1:04 +0100GMT, where I live), you wrote: 3> Full system scan with newest version of G-Data Antivirenkit 3> (Dual-Engine with KAV and RAV) doesn't show anything. However, if TB! 3> is running, suddenly a virus warning appears from differen

Virus testing

2002-11-15 Thread 3w
Hi folks I was curious and checked my security with this site: http://www.gfi.com/emailsecuritytest/ Now I can't get rid of this Exploit.IFrame Virus and hope that someone can help me. Full system scan with newest version of G-Data Antivirenkit (Dual-Engine with KAV and RAV) doesn't show anythi

Re: I was just Eicar test virus testing, when.....

2002-10-19 Thread Scott McNay
Hi Nick! In message mid:20021018120126.4F21.ANDRIASH@;shaw.ca on Friday, October 18, 2002, 2:07:25 PM, you wrote: >> http://www.microsoft.com/technet/security/bulletin/MS02-054.asp NA> Thanks Marcus... I have read the article, but I still remain skeptical. NA> Why? Because if that were true, t

Re[2]: I was just Eicar test virus testing, when.....

2002-10-18 Thread DG Raftery Sr.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Friday, October 18, 2002 4:04:09 PM RE: "I was just Eicar test virus testing, when." Greetings Nick, On Friday, October 18, 2002, 3:07:25 PM, you wrote: NA> Think of all the hundreds of thousands... or millions... of *.zip files

Re: I was just Eicar test virus testing, when.....

2002-10-18 Thread Jonathan Angliss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday, October 18, 2002, Nick Andriash wrote... >>> I have never heard of a *.zip file that was itself a virus. Is >>> that what you are referring to, and if so can you point to some >>> documentation that explains how they do it or how it works?

Re: I was just Eicar test virus testing, when.....

2002-10-18 Thread Nick Andriash
Hello Marcus Ohlström, On Friday, October 18 2002 at 12:43 AM PDT, you wrote: > > I have never heard of a *.zip file that was itself a virus. Is that > > what you are referring to, and if so can you point to some > > documentation that explains how they do it or how it works? > > http://www.micr

Re: I was just Eicar test virus testing, when.....

2002-10-18 Thread Jonathan Angliss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday, October 18, 2002, Carren Stuart wrote... JA>> The virus doesn't exist inside the archive... it is the archive JA>> ;) > But if this is the case then surely that would mean that the moment > you unzip the archive, the virus is executed? I d

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Jonathan Angliss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thursday, October 17, 2002, Chris Weaven wrote... > To go one step further, it would be a nice touch if scanners did check > compressed files also. Some do... some don't. Some companies don't deem it necessary to waste system resources reading the

Re[2]: I was just Eicar test virus testing, when.....

2002-10-17 Thread Joseph N.
On Thursday, October 17, 2002, Chris Weaven wrote in : CW> To go one step further, it would be a nice touch if scanners did check CW> compressed files also. Chris, This may be a terminology thing, but the NOD32 scanner does check compressed archiv

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Allie C Martin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In , Carren Stuart [CS] wrote:' CS> Amon *let* me unzip both zipped files without warning me BUT CS> when I attempted to open the unzipped files, it then gave me a CS> warning as I would have expected. I a

Re[2]: I was just Eicar test virus testing, when.....

2002-10-17 Thread Carren Stuart
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday, 18 October 2002 at 2:51 p.m. Allie wrote: ACM> I sent it to you zipped. This is why. If you try to unzip ACM> eicar.com then Amon will stop you. OK, now I am interested. I have just done some playing around with the files myself out of in

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Chris Weaven
Hi Joseph, On Thursday, October 17, 2002 22:27 your local time, which was 20:27 my local time, Joseph N. [JN] wrote; JN> Confidence restored. It would be nice, though, if there were some JN> type of notice when trying to open the archive. All I get (with NOD32 JN> and WinRAR 3.00) is a WinRAR w

Re[2]: I was just Eicar test virus testing, when.....

2002-10-17 Thread Joseph N.
On Thursday, October 17, 2002, Allie C Martin wrote in : > The thing is that neither Amon or the incoming plugin scanner will > check archives. However, the plugin immediately detects the virus > when you try to open the archive. A manual scan of

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Allie C Martin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In , Chris Weaven [CW] wrote:' CW> But I thought it had a function to check zipped files/compressed CW> files? It does. Scan it manually and you'll see. Trying to open the archive from TB! also results i

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Allie C Martin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In , Joseph N. [JN] wrote:' JN> As I said, this is troubling. Anyone have a compelling JN> explanation for this behavior? The thing is that neither Amon or the incoming plugin scanner will check archives. Howe

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Chris Weaven
Hi Allie, On Thursday, October 17, 2002 20:51 your local time, which was 18:51 my local time, Allie Martin wrote; > I sent it to you zipped. This is why. If you try to unzip eicar.com > then Amon will stop you. But I thought it had a function to check zipped files/compressed files? Chris. --

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Allie C Martin
In , Chris Weaven [CW] wrote:' CW> Maybe it's just the Eicar file or am I being kind? CW> Still worrying though! CW> Anyone with any comments, suggestions or anything? I sent it to you zipped. This is why. If you try to unzip eicar.com then Amon will

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Scott McNay
Hi Chris! In message mid:1417360232.20021017182805@;Surfcity.net on Thursday, October 17, 2002, 8:28:05 PM, you wrote: CW> Maybe it's just the Eicar file or am I being kind? The EICAR file should always be caught, otherwise the purpose of it is defeated. -- --Scott. mailto:Wizard@;local.nu

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Chris Weaven
Hi Joseph, On Thursday, October 17, 2002 19:54 your local time, which was 17:54 my local time, Joseph N. [JN] wrote; JN> I downloaded the most fully nested EICAR test file. When NOD32 JN> scanned it after GetRight pulled it in, it came up positive. I then JN> emailed it from one account to anot

Re: I was just Eicar test virus testing, when.....

2002-10-17 Thread Joseph N.
On Thursday, October 17, 2002, Chris Weaven wrote in : CW> I think I found a weakness in NOD32 pop3 scanning. Hmmm... This is troubling I downloaded the most fully nested EICAR test file. When NOD32 scanned it after GetRight pulled it in

I was just Eicar test virus testing, when.....

2002-10-17 Thread Chris Weaven
I think I found a weakness in NOD32 pop3 scanning. At the moment, I'm running pop3 scanning and AVG with the plug-in. I thought I'd give this little set-up a test run. So; 1. I sent the test file as a notepad attachment using another of my e-mail address through e-mailanywhere.com directly