Page 1 of 2 12 LastLast
Results 1 to 15 of 19
  1. #1
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Which antivirus programs protect webmail?

    Sorry if this is a repeat of a thread a month or two ago, but I'd be interested to know if anyone has information about which antivirus programs protect the user against being infected by webmail viruses/trojans (Hotmail, Yahoo Mail, etc) and viruses sneakily downloaded by accessing web pages using a browser?

    Almost all antivirus programs seems to do a good job of trapping infected Outlook- and Outlook Express-based messages, but you don't get much info on webmail/browser protection...

    ... or does ZoneAlarm Pro do the job that should be done by the antivirus programs?
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  2. #2
    Plutonium Lounger
    Join Date
    Oct 2001
    Location
    Lexington, Kentucky, USA
    Posts
    12,107
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Which antivirus programs protect webmail?

    Even though my ISP provides "webmail" access, I don't regularly use it (or any of the others). But, this excerpt from my PC-Cillin 2003 (Build 1039, version 10.01) ReadMe file:
    <hr>Webmail virus scanning
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Previous versions of PC-cillin scan viruses when receiving email messages from the POP server, but now PC-cillin 2003 can scan while
    you are downloading attached files from your Webmail accounts accessed through an Internet browser. <hr>

    Not sure if that fully answers your question, John, but it's all I could find so far.

  3. #3
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Swanzey, New Hampshire, USA
    Posts
    1,707
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Which antivirus programs protect webmail?

    John,

    I download e-mail from a couple of 3rd party online e-mail accounts and NAV (SystemWorks 2003 Pro) scans them as they are downloaded no differently than any other incoming e-mail. It shouldn't make any difference as to the source; at least that's how it seems to me. <img src=/S/grin.gif border=0 alt=grin width=15 height=15>

    Jeff
    Jeff
    simul iustus et peccator

  4. #4
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Which antivirus programs protect webmail?

    I am a dedicated NAV user. The latest versions will protect you quite nicely and also integrate into certain IM client software.
    -Mark

  5. #5
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Which antivirus programs protect webmail?

    Mark

    Well, our machine got infected with W32/Webber-A (or -B or -C, similar things) through someone downloading an infected email via Yahoo! Mail, even though we have NAV 2003 with LiveUpdate, supplemented by me downloading new pattern files about every couple of days! Absolutely nothing trapped, and I was alerted to the problem only because the randomly-named EXE file keep falling over every few minutes and restarting. Did you see which registry key was used to start the exe file? I'd never heard of it, and neither had Spbot S&D...

    As you will appreciate, I was not at all impressed, and had to go around renaming the Trojan EXE and DLL files, and looking with significant horror at a file Neh32.dat, which had all the Protected Storage data in it (wonder why?).

    Hence my question...
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  6. #6
    Super Moderator
    Join Date
    Dec 2000
    Location
    Renton, Washington, USA
    Posts
    12,560
    Thanks
    0
    Thanked 4 Times in 4 Posts

    Re: Which antivirus programs protect webmail?

    Are you sure that the user or some one else disable Nortons?

    The users can do this <img src=/S/bwaaah.gif border=0 alt=bwaaah width=123 height=15>

    Now running HP Pavilion a6528p, with Win7 64 Bit OS.

  7. #7
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Which antivirus programs protect webmail?

    Not round here, they can't...!
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  8. #8
    Super Moderator
    Join Date
    Dec 2000
    Location
    Renton, Washington, USA
    Posts
    12,560
    Thanks
    0
    Thanked 4 Times in 4 Posts

    Re: Which antivirus programs protect webmail?

    Are you sure?
    I worked for a big company and the IT's thought they had control. But they forgot to look at the "Right click" of the ICON in the systray 'Disable Auto Protect'.

    Now running HP Pavilion a6528p, with Win7 64 Bit OS.

  9. #9
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Which antivirus programs protect webmail?

    Fairly sure - there are only three of us here at home. I do techie for a living, and I showed the other two how to turn the PC on...
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  10. #10
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Which antivirus programs protect webmail?

    I submit that you may have been among the first to get bitten. Something to consider, at least. Antivirus software only catches what it knows about. Heuristics, in my eyes, is nearly worthless against new threats.

    I refuse to start bashing McAfee because some people swear by it, but what I can truthfully state is that I have not had any experience with in for a long time. I plan for that time to grow longer still. <img src=/S/grin.gif border=0 alt=grin width=15 height=15> Most AV packages do the same thing, but McAfee and NAV are consistently rated at the top of the heap for catching nasties.

    I certainly do appreciate what oaths you must have uttered whilst renaming a multitude of EXE and DLL files. <img src=/S/flee.gif border=0 alt=flee width=25 height=25>
    -Mark

  11. #11
    Plutonium Lounger
    Join Date
    Oct 2001
    Location
    Lexington, Kentucky, USA
    Posts
    12,107
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Which antivirus programs protect webmail?

    If you're even remotely considering an AV change, why don't you send a query to TrendMicro, describing your circumstances and see what they say? As most here know, I eventually dumped McAfee after using it since the "beginning." But, during all these years with either McAfee or PC-Cillin, I've not had any mishaps. <img src=/S/crossfingers.gif border=0 alt=crossfingers width=17 height=16>

  12. #12
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Which antivirus programs protect webmail?

    It's difficult to understand how this could happen. When the message body is downloaded, it normally will be stored in TIF (unless its HTTPS, then maybe it won't??). All AV products scan when writing to the file system and will intercept viral writes at that point. Similarly with downloading attachments. Is it possible that the TIF is not protected?? One could test with the EICAR file as an attachment (I forget where you get it). If the AV detects that, then perhaps there was a subtle change in the attachment that fooled the scanner.

  13. #13
    Silver Lounger
    Join Date
    Oct 2002
    Posts
    1,993
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Which antivirus programs protect webmail?

    Slightly off topic:
    <hr>One could test with the EICAR file as an attachment (I forget where you get it).<hr>
    How about Eicar.com or Eicar.org, http://www.eicar.com/

    Sometimes you will find the text to include in the Eicar testfile in the AV help files, then just cut and paste in notepad and save as a .com.

    As to AV that protect/monitor webmail, I have not thought so much about it since I very rarely use webmail. If I come to think about something, I'll return.

    A little more off topic: some of the annoyances between different AV products, in my perspective, is not only their possibility to detect, but also how you can /if you can change what to do if a virus is found. Do not like programs that run around and try to repair without asking. Well I suppose many agree, not all. But the major problem is the marketing around the product, some AV's has PR departments that goes ... well I suppose it's an issue of what you prefer and would like to support and buy. Some interesting thoughts about e-mail notification/alerts that AV products can send is written by Fridrik Skulason, Founder of FRISK Software International, with the gigantic e-mail traffic that followed Sobig in some countries some months ago in mind.

    Why (some) anti-virus companies are to blame for the recent e-mail flood

    Regards,

  14. #14
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Which antivirus programs protect webmail?

    > how you can /if you can change what to do if a virus is found

    Our centralized antivirus allows the administrator to choose the action. Macro viruses can be cleaned out of documents, but almost all the others are rotten to the core and should just be deleted. So we generally let the software decide for us based on its own knowledge of the virus, rather than dictate a single approach. Not sure which home products allow similar functionality.

  15. #15
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Which antivirus programs protect webmail?

    Jefferson

    A read of the writeup on the Webber trojan shows that it gets downloaded as a GIF - unless one's AV scanner is set to scan ALL programs, not just those classed as "executable", it won't find it. Furthermore, it generates a randomly-named EXE and DLL file (which shouldn't matter, since it had the virus pattern in since about 11 November!).

    (In passing, I did an exercise a couple of years ago where I compared those extensions which were regarded as "executable", and therefore would be scanned by default, by half a dozen AV vendors. I won't post the results, but you would be surprised by the differences... Of course, a virus author may choose not to give his virus the "correct" file extension...)

    I eventually gave up on the renaming issue and did a System Restore to before the virus was downloaded, and it worked pretty well, Kudos to Microsoft, for a change!
    I've also read up on the Pro version of Zone Alarm, and it offers much more protection (in this context) than the free version, so it's in on trial*. Only snag so far is that our ISP/cable provider appears to PING(ICMP) (validly, their tech support says) our PC roughly every four seconds, and that fills up the log rather. Have to find out how to strip these out...

    Thanks to everyone else for their comments, which are much appreciated. I will probably stick with NAV, since it has been pretty trouble-free since purchase, and investigate its provision for webmail checking and "all file" checking in more depth, while I'm off work over the festive period. In passing I note that at work we use Sophos for server and workstation protection (except for cluster servers where we still have to use Network Associates' NetShield, but that's another story!), and Trend ScanMail for Exchange. All "company policy", you understand, but, except for Exchange, my responsibility...


    * I observe that installing ZoneAlarm Pro doesn't turn off XP's ICF firewall - should it? Does it matter that you could have both firewalls enabled?
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •