|
Posted by Charlie Tame on September 30, 2006, 1:45 am
If you were Registered and logged in, you could reply and use other advanced thread options
opinions because we all use our machines for different purposes, sometimes
there is no "Right" solution, you're welcome.
Charlie
> Thanks. I again learned something new.
> As my late father used to say: Until you still can learn you are nor dead
> yet...
> Marek Kalisz
>
>>
>>> My AV founded a virus in some message in the group (or, at least, in
>>> this group dbx): microsoft.public.windowsxp.help_and_support
>>>
>>> Generic.Botget.C7C6EB6C.Generic.Botget.ABF6C813
>>>
>>> So, after initial quarantining, I had to delete this group dbx and
>>> reconstruct it from scratch (download all). But... Isn't this strange?
>>> All messages are scanned, right?
>>> Marek Kalisz
>>
>>
>> Several things here.
>>
>> First, when doing real time scanning you do NOT want your AV program to
>> include .dbx files, if this had been a mail folder like inbox.dbx you
>> would have lost email messages that are probably not recoverable. The
>> .dbx files are data stores and are not executed unless you actually
>> execute the malware while viewing it in Outlook Express. The AV will
>> detect the signature but can only remove the whole file, it cannot read
>> it like OE does and remove the bad message.
>>
>> Scanning emails is a bad thing with OE, sooner or later OE will get upset
>> about it and you will get a damaged .dbx file. You AV real time scanning
>> will protect you just as well if a virus tries to execute. If it doesn't
>> see the virus then it won't see it when scanning emails so you gain
>> nothing but increase the risk of damage.
>>
>> I don't know of any AV that scans newsgroup messages. The convention with
>> groups such as these is to avoid using active content like HTML and post
>> in plain text. Also, unless there is some useful advantage in using an
>> attachment (A helpful picture maybe) attachments are discouraged. It
>> would generally be better to post a link to a picture on the web if
>> possible.
>>
>>
>> --
>> Still the best sites for OE details
>> http://www.insideoe.tomsterdam.com/
>> http://www.oehelp.com/
>>
>> Charlie
>>
>
>
| 
XML site map