I was just checking the virus vault on my Windows AVG virus software and I found that, in the vault, were three files in Messenger's !NewsDir directory in the Spool folder.
This had me a little worried, so I checked for the files mentioned and, sure enough, they weren't inside !NewsDir.MsgServe.Spool.0.whatever anymore.
I checked the 'Group' files in the two directories from which the three files had been removed, and they were Messenger's 'Wastebasket' and 'Spam' folders.
What if AVG decides (erroneously, of course) that one of the more important files inside !NewsDir is a virus?!?!
One thing I have noticed is that the files inside Spool are not compressed, i.e. they are perfectly readable if you shift-double-click them into a text editor.
Now, I seem to remember that there's an option in MessPro (I'm using v. 4.24) to choose to store compressed or non-compressed, but I can't find where it's set (assuming I didn't imagine it). Might it be a way of avoiding the AVG problem?
Any thoughts would be much appreciated.
All the best,
Paul
Paul Beverley (Archive Publications), Advanced Member SfEP --------------------------------------------------------------------- Editing & proofreading +44-1603-722544 - http://www.archivepub.co.uk
Paul Beverley <p...@archivepub.co.uk> wrote: > What if AVG decides (erroneously, of course) that one of the more > important files inside !NewsDir is a virus?!?!
Then you should send a sample of the file to Grisoft so they can fix their scanning patterns to remove the false positive. Of course, it's also perfectly likely that it /is/ detecting viruses/worms that have found their way to you.
> One thing I have noticed is that the files inside Spool are not > compressed, i.e. they are perfectly readable if you shift-double-click > them into a text editor.
> Now, I seem to remember that there's an option in MessPro (I'm using > v. 4.24) to choose to store compressed or non-compressed, but I can't > find where it's set (assuming I didn't imagine it). Might it be a way > of avoiding the AVG problem?
Depends how it compresses them. If it compresses them in a way AVG understands, it won't help.
> I was just checking the virus vault on my Windows AVG virus software > and I found that, in the vault, were three files in Messenger's > !NewsDir directory in the Spool folder.
> This had me a little worried, so I checked for the files mentioned and, > sure enough, they weren't inside !NewsDir.MsgServe.Spool.0.whatever > anymore.
Yes, I have seen this, and it's a PITA. All the more reason not to use Windows, IMO. At least Windows viruses won't run on RISC OS.
> Now, I seem to remember that there's an option in MessPro (I'm using > v. 4.24) to choose to store compressed or non-compressed, but I can't > find where it's set (assuming I didn't imagine it). Might it be a way > of avoiding the AVG problem?
Perhaps, but you shouldn't expect all the files to be compressed all the time. And in my setup, it picked them up from POPStar, which you may or may not be using.
You might be able to disable AVG for VRPC's directory, I forget exactly, it was a while ago.
Paul Beverley <p...@archivepub.co.uk> wrote: > Hi All
> I was just checking the virus vault on my Windows AVG virus software and I > found that, in the vault, were three files in Messenger's !NewsDir > directory in the Spool folder.
> This had me a little worried, so I checked for the files mentioned and, > sure enough, they weren't inside !NewsDir.MsgServe.Spool.0.whatever > anymore.
> I checked the 'Group' files in the two directories from which the three > files had been removed, and they were Messenger's 'Wastebasket' and 'Spam' > folders.
> What if AVG decides (erroneously, of course) that one of the more > important files inside !NewsDir is a virus?!?!
> One thing I have noticed is that the files inside Spool are not > compressed, i.e. they are perfectly readable if you shift-double-click > them into a text editor.
> Now, I seem to remember that there's an option in MessPro (I'm using v. > 4.24) to choose to store compressed or non-compressed, but I can't find > where it's set (assuming I didn't imagine it). Might it be a way of > avoiding the AVG problem?
> Any thoughts would be much appreciated.
It has been a while since I last used MPro, so I hope I remember this correctly. The compression setting variable is CompressionCutoff in !NewsDir.MsgServe.Config, for no compression the value is 0, the default was 100 I think.
AVG8 can be configured to leave nominated directories alone in Tools -> Advanced settings -> Resident Shield -> Exceptions.
Given that the spool files are already uncompressed it may that AVG is responding to spam flags in the message headers, if your ISP does any spam checking that is.
In message <20080827204228.37bd9...@trite.i.flarn.net.i.flarn.net> Rob Kendrick <n...@rjek.com> wrote:
> On Wed, 27 Aug 2008 20:28:07 +0100 > Paul Beverley <p...@archivepub.co.uk> wrote:
> > What if AVG decides (erroneously, of course) that one of the more > > important files inside !NewsDir is a virus?!?!
> Then you should send a sample of the file to Grisoft so they can fix > their scanning patterns to remove the false positive. Of course, it's > also perfectly likely that it /is/ detecting viruses/worms that have > found their way to you.
Of course it is! Silly me! After all, they were in my Spam directory and my Wastebasket (where spam goes).
> > One thing I have noticed is that the files inside Spool are not > > compressed, i.e. they are perfectly readable if you shift-double-click > > them into a text editor.
> > Now, I seem to remember that there's an option in MessPro (I'm using > > v. 4.24) to choose to store compressed or non-compressed, but I can't > > find where it's set (assuming I didn't imagine it). Might it be a way > > of avoiding the AVG problem?
> Depends how it compresses them. If it compresses them in a way AVG > understands, it won't help.
Right, so I'll leave it all alone and stop panicking unnecessarily! :-)
All the best,
Paul
Paul Beverley (Archive Publications), Advanced Member SfEP --------------------------------------------------------------------- Editing & proofreading +44-1603-722544 - http://www.archivepub.co.uk
