Vet Anti Virus Software

[Echy]

Hi

I'm curious to see if many people that visit this newsgroup use the now
CA owned, Australian developed and maintained anti-virus software, VET.

Especially interested to see if non or expat. Aussies use it, as well as
locals.

I have been using it for many years and find it very good.

--
Regards
Echy

Greetings from Melbourne, Australia
www.visitvictoria.com.au

 

[John .]

Hi
I'm curious to see if many people that visit this newsgroup use the now
CA owned, Australian developed and maintained anti-virus software, VET.
Especially interested to see if non or expat. Aussies use it, as well as
locals.
I have been using it for many years and find it very good.

Vet is the AntiVirus included in eTrust AntiVirus (www.ca.com) and
also is the same one included in the ZoneAlarm (www.zonelabs.com).

I have Zonealarm with AntiVirus (the vet software) on one pc and it is
working fine. I don't think most people are aware that ZoneAlarm uses
the VET AntiVirus. It's not readily obvious from the zonealarm
website.

Vet doesn't seem to be included in some of the AntiVirus comparison
tests. Maybe someone can point out where?

 

[Heather]

Vet is the AntiVirus included in eTrust AntiVirus (www.ca.com) and
also is the same one included in the ZoneAlarm (www.zonelabs.com).

I have Zonealarm with AntiVirus (the vet software) on one pc and it is
working fine. I don't think most people are aware that ZoneAlarm uses
the VET AntiVirus. It's not readily obvious from the zonealarm
website.

Glad you mentioned this. I have used eTrust since it's free InoculateIT PE
days.....but switched to the MS one back when it included the rebadged Zone
Alarm firewall. I only use the antivirus part because I have ZA Pro.

Question.....when I went to update ZAPro, it said my version with web
filtering was no longer being worked on, but that I could either continue to
use it or have the full ZA Security Suite for free. I didn't take advantage
of it so far because I didn't know what antivirus was in it. It is
downloaded but not opened.

So....long story short....my MS eTrust has the free Zone Alarm.......does
the ZA Security Suite have the latest eTrust version?

Confused.....grin.

Heather

 

[Bob]

Hi

I'm curious to see if many people that visit this newsgroup use the now
CA owned, Australian developed and maintained anti-virus software, VET.

Especially interested to see if non or expat. Aussies use it, as well as
locals.

I have been using it for many years and find it very good.

Road Runner offers it free for one year. Tech support claims it may
likely go beyond the one year. Road Runner is part of the AOL Time
Warner conglomerate, so if they want it free, they will get it free.

I like it thus far in terms of friendliness.

I tried the old CA AV utility back in 1997 and it was worthless. It
let all manner of crap in. So I went with McAfee until I just got CA
AV known as eTrust.


--

Map of the Vast Right Wing Conspiracy
http://home.houston.rr.com/rkba/vrwc.html

If you can read this, thank a teacher.
If you are reading it in English, thank an American soldier.

 

[DaVinci]

Glad you mentioned this. I have used eTrust since it's free InoculateIT PE
days.....but switched to the MS one back when it included the rebadged Zone
Alarm firewall. I only use the antivirus part because I have ZA Pro.

Question.....when I went to update ZAPro, it said my version with web
filtering was no longer being worked on, but that I could either continue to
use it or have the full ZA Security Suite for free. I didn't take advantage
of it so far because I didn't know what antivirus was in it. It is
downloaded but not opened.

So....long story short....my MS eTrust has the free Zone Alarm.......does
the ZA Security Suite have the latest eTrust version?

Confused.....grin.

Heather

Zone Labs uses CA antivirus technology (see #4 in the FAQ).

http://www.zonelabs.com/store/conte...6903!7551!7552!NONE?lid=zassskulist2_awards#3

The AV function in the Suite is not a standalone application. It's
accessed from within the ZA GUI. It's difficult to say whether or not
it's the latest eTrust version. There doesn't seem to be any info on
the Zone Labs web site that addresses this.

 

[Heather]

PE days.....but switched to the MS one back when it included the rebadged
Zone Alarm firewall. I only use the antivirus part because I have ZA Pro.continue > >to use it or have the full ZA Security Suite for free. I didn't
take advantage > > of it so far because I didn't know what antivirus was in
it. It is downloaded but not opened.

Zone Labs uses CA antivirus technology (see #4 in the FAQ).

http://www.zonelabs.com/store/conte...6903!7551!7552!NONE?lid=zassskulist2_awards#3

The AV function in the Suite is not a standalone application. It's
accessed from within the ZA GUI. It's difficult to say whether or not
it's the latest eTrust version. There doesn't seem to be any info on
the Zone Labs web site that addresses this.

Thanks DV....I was hoping the AV was a standalone application. I will go
over that page again. I am using version 4.5.594.00 and after seeing that
the Version 5's in ZAPro are having problems, glad I stayed with it. I
usually use an older version due to all the bugs they have in their new
versions.

My MS E-Trust freebie is up in August, so may switch to this ZA Security
Suite and see how it goes.

Cheers....Heather
(must get back to reading your ancestor's book, grin)

 

[John .]

Thanks DV....I was hoping the AV was a standalone application. I will go
over that page again. I am using version 4.5.594.00 and after seeing that
the Version 5's in ZAPro are having problems, glad I stayed with it. I
usually use an older version due to all the bugs they have in their new
versions.

My MS E-Trust freebie is up in August, so may switch to this ZA Security
Suite and see how it goes.

Cheers....Heather

The ZoneAlarm antivirus comes from CA Australia VET:

http://www.vet.com.au/

If you have the Zonealarm with Antivirus or Zonealarm Security Suite,
you will get your updates via ZoneAlarm. However, by signing up with
http://www.vet.com.au/ for email notices, you'll find that the version
update they publish is the same as the ZoneAlarm one.

For what I have gathered the sequence is:

Vet updates their antivirus

Vet sends out email notices if you subscribed. You do not have to own
Vet to get the email notices.

Vet sends it to ZoneAlarm

ZoneAlarm integrates it with their product.

If you have ZoneAlarm product, it will do the auto-update.

 

[Heather]

The ZoneAlarm antivirus comes from CA Australia VET:

http://www.vet.com.au/

If you have the Zonealarm with Antivirus or Zonealarm Security Suite,
you will get your updates via ZoneAlarm. However, by signing up with
http://www.vet.com.au/ for email notices, you'll find that the version
update they publish is the same as the ZoneAlarm one.

For what I have gathered the sequence is:

Vet updates their antivirus

Vet sends out email notices if you subscribed. You do not have to own
Vet to get the email notices.

Vet sends it to ZoneAlarm

ZoneAlarm integrates it with their product.

If you have ZoneAlarm product, it will do the auto-update.

Thank you so much, John!! You covered it all. I will tuck this away and
give the ZA Security Suite a try. I use WinME and some programs get a tad
hinky with it....but most are fine. I always download upgrades and full
programs unopened and then have the older ones there in case I want to go
back one version.

Many thanks....Heather

 

[John .]

Thank you so much, John!! You covered it all. I will tuck this away and
give the ZA Security Suite a try. I use WinME and some programs get a tad
hinky with it....but most are fine. I always download upgrades and full
programs unopened and then have the older ones there in case I want to go
back one version.

Many thanks....Heather

I forgot to mention the link to get email notifications:
http://www.vet.com.au/servlet/email?stage=1

 

[John .]

Thank you so much, John!! You covered it all. I will tuck this away and
give the ZA Security Suite a try. I use WinME and some programs get a tad
hinky with it....but most are fine. I always download upgrades and full
programs unopened and then have the older ones there in case I want to go
back one version.

Many thanks....Heather

If all that wasn't confusing enough, I ran across this eTrust
antivirus offering for Microsoft users for free:

http://store.ca.com/dr/v2/ec_main.e...lient=ComputerAssociates&sid=55939&CID=190471

So one solution could be, ZoneAlarm free firewall version + CA free
antivirus.

From what I can see, that's exactly the same as the ZoneAlarm with CA
AntiVirus which costs $24.95.

Go figure!!

 

[Heather]

If all that wasn't confusing enough, I ran across this eTrust
antivirus offering for Microsoft users for free:

http://store.ca.com/dr/v2/ec_main.e...lient=ComputerAssociates&sid=55939&CID=190471

So one solution could be, ZoneAlarm free firewall version + CA free
antivirus.

From what I can see, that's exactly the same as the ZoneAlarm with CA
AntiVirus which costs $24.95.

Go figure!!

Grin!! Yes.....when eTrust was expiring, I downloaded EZ Armor...but only
used the antivirus part coz I had ZAPro.

Then I recommended the above free antivirus to a lot of friends. Or folks
on the MS groups. Now it looks like I get another kick at the can with this
ZA Security Suite. I plan on putting it on when the free EZ Armor one
expires in August.

Could be fun switching back and forth between the freebie offers. Btw....I
wrote CA when the free stuff came out and even tho at first it said 'new
customers only', they told me to go for it!!

Cheers.....Heather

 

[Echy]

Vet is the AntiVirus included in eTrust AntiVirus (www.ca.com) and
also is the same one included in the ZoneAlarm (www.zonelabs.com).

I have Zonealarm with AntiVirus (the vet software) on one pc and it is
working fine. I don't think most people are aware that ZoneAlarm uses
the VET AntiVirus. It's not readily obvious from the zonealarm
website.

Vet doesn't seem to be included in some of the AntiVirus comparison
tests. Maybe someone can point out where?

Even though I am an avid fan of Vet I did not know that it was the
backbone of these other products. Good to see an Aussie idea so
obviously well regarded.

--
Regards
Echy

Greetings from Melbourne, Australia
www.visitvictoria.com.au

 

[Bob]

Even though I am an avid fan of Vet I did not know that it was the
backbone of these other products. Good to see an Aussie idea so
obviously well regarded.

Don't forget Mailwasher from New Zealand.

It is one of the mysteries of capitalism that the English-speaking
countries did not uniformly take over the software industry worldwide.
America did - but then America is a capitalist country, whereas the
Commonwealth countries are socialist.

Therein lies the critical factor.

--

Map of the Vast Right Wing Conspiracy
http://home.houston.rr.com/rkba/vrwc.html

If you can read this, thank a teacher.
If you are reading it in English, thank an American soldier.

 

[Norman L. DeForest]

Don't forget Mailwasher from New Zealand.

Is that the same Mailwasher as is sold by Firetrust, the alleged anti-spam
and anti-virus experts that have twice bounced a live virus to my inbox
because my address was forged as the sender? Or are you thinking of a
different Mailwasher?

 

[Bob]

Is that the same Mailwasher as is sold by Firetrust, the alleged anti-spam
and anti-virus experts that have twice bounced a live virus to my inbox
because my address was forged as the sender? Or are you thinking of a
different Mailwasher?

There is only one Mailwasher - from Firetrust.

Please explain in more detail what happened.

I only use Mailwasher itself - I do not use their AV tools. The reason
is simple - when it comes to AV, you need a big organization with the
resources to stay abreast of the latest viruses. Firetrust is not that
size organization.

I have MW set up to look at spamhaus, spamcop, ORDB and VISI, in that
order. Spamhaus usually finds spam for me. Then I have the Bayesian
filter which does catch some. Plus I have my own blacklist which
sometimes catches repeat offenders.

Very little escapes MW's attention, and when it does, I blacklist it
and then tell MW to "learn", which means it updates the Bayesian
filter. But as I said, I do not use MW to do any AV detection. I rely
on my Road Runner ISP and Computer Associates eTrust for that.

I remember when CA first got into the AV business - back around 1997
or thereabouts. I got their free evaluation package and it looked OK
at first, but it let a virus in undetected so I removed it. I then got
McAfee and it found the virus right away. So even the big boys can
fall short of the mark in the beginning.

I am now back to running the CA AV but I do not know if it works. Ever
since Road Runner began filtering viruses, even McAfee was quiet for
several years. I am beginning to wonder if I even need an AV.




--

Map of the Vast Right Wing Conspiracy
http://home.houston.rr.com/rkba/vrwc.html

If you can read this, thank a teacher.
If you are reading it in English, thank an American soldier.

 

[Norman L. DeForest]

There is only one Mailwasher - from Firetrust.

Please explain in more detail what happened.

[snip]

Correction. *Three* times they have bounced worms to me. I found another
in my email archives. (I haven't yet found the one that was successfully
disinfected by my ISP's filter. I may have zipped in in my mail directory
on my Internet account without having downloaded it yet.)

In both cases, the origin was an IP address that has *nothing* to do with
my ISP (all IPs in 192.75.95.0/24) but had its hostname forged in the HELO:

: Received: from unknown (HELO chebucto.ns.ca) (218.24.142.194)
: Received: from unknown (HELO chebucto.ns.ca) (218.24.142.194)

First sample:

: From <> Fri Jan 7 01:49:35 2005
: Received: from loki.chebucto.ns.Ca ([192.75.95.97]:35947 "EHLO
: loki.chebucto.ns.ca") by halifax.chebucto.ns.ca with ESMTP
: id S13002AbVAGFru (ORCPT <rfc822;[email protected]>);
: Fri, 7 Jan 2005 01:47:50 -0400
: Received: from lobster.firetrust.com ([69.59.174.220]:13513 "HELO
: lobster.firetrust.com") by loki.chebucto.ns.Ca with SMTP
: id <S4248333AbVAGFmF>; Fri, 7 Jan 2005 01:42:05 -0400
: Received: (qmail 19754 invoked for bounce); 7 Jan 2005 05:46:52 -0000
: Received: (mailwasher server; not checked: socket error connecting to the
: MPD: unable to connect to /local:/var/run/mwserver/mpd.sock: Connection refused); 07 Jan 2005 05:46:52 +0000
: Date: 7 Jan 2005 05:46:52 -0000
: From: (e-mail address removed)
: To: (e-mail address removed)
: Subject: Virus: failure notice
^^^^^^ <-- added by my ISP's filter

: X-CCN-MailScanner-Information: Please contact the ISP for more information
: X-MailScanner: Virus Infected
: X-Is-Spam: not spam, SpamAssassin (score=2.27, required 5,
: autolearn=disabled, AWL -0.04, BAYES_50 0.00, NO_REAL_NAME 0.01,
: UNIQUE_WORDS 2.27, UPPERCASE_25_50 0.03)
: X-MailScanner-SpamScore: ss
: X-MailScanner-From:
: Message-Id: <[email protected]>
: Return-Path: <>
: Status: RO
: X-Status:
:
: Warning: This message has had one or more attachments removed
: Warning: (file.pif).
: Warning: Please read the "VirusWarning.txt" attachment(s) for more
: information.
:
: Hi. This is the qmail-send program at lobster.firetrust.com.
: I'm afraid I wasn't able to deliver your message to the following
: addresses.
: This is a permanent error; I've given up. Sorry it didn't work out.
:
: <[email protected]>:
: Sorry, no mailbox here by that name. vpopmail (#5.1.1)
:
: --- Below this line is a copy of the message.
:
: Return-Path: <[email protected]>
: Received: (qmail 18805 invoked from network); 7 Jan 2005 05:46:52 -0000
: Received: (mailwasher server; not checked: socket error connecting to the MPD: unable to connect to /local:/var/run/mwserver/mpd.sock: Connection refused); 07 Jan 2005 05:46:52 +0000
: Received: from unknown (HELO chebucto.ns.ca) (218.24.142.194) by lobster.firetrust.com with SMTP; 7 Jan 2005 05:45:57 -0000
: From: (e-mail address removed)
: To: (e-mail address removed)
: Subject: HELLO
: Date: Fri, 7 Jan 2005 13:44:18 +0800
: MIME-Version: 1.0
: Content-Type: multipart/mixed;
: boundary="----=_NextPart_000_0007_99DAED9D.5DF05053"
: X-Priority: 3
: X-MSMail-Priority: Normal
:
: This is a multi-part message in MIME format.
:
: ------=_NextPart_000_0007_99DAED9D.5DF05053
: Content-Type: text/plain;
: charset="Windows-1252"
: Content-Transfer-Encoding: 7bit
:
: It's the long-awaited film version of the Broadway hit. The message sent
: as a binary attachment.
:
:
: ------=_NextPart_000_0007_99DAED9D.5DF05053
: Content-Type: application/octet-stream;
: name="file.pif"
: Content-Transfer-Encoding: base64
: Content-Disposition: attachment;
: filename="file.pif"
:
: TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
: [BIG SNIP of infectious worm]
: aWJyYXJ5QQAAAAAAAAAAAAAAAABsjwQAXI8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
:
: ------=_NextPart_000_0007_99DAED9D.5DF05053--

Second sample:

: From <> Mon Mar 14 03:50:42 2005
: Received: from lich.chebucto.ns.Ca ([192.75.95.79]:36575 "EHLO
: lich.chebucto.ns.ca") by halifax.chebucto.ns.ca with ESMTP
: id S1862AbVCNHru (ORCPT <rfc822;[email protected]>);
: Mon, 14 Mar 2005 03:47:50 -0400
: Received: from lobster.firetrust.com ([69.59.174.220]:7901 "HELO
: lobster.firetrust.com") by lich.chebucto.ns.ca with SMTP
: id <S416521AbVCNHrp>; Mon, 14 Mar 2005 03:47:45 -0400
: Received: (qmail 1855 invoked for bounce); 14 Mar 2005 07:47:03 -0000
: Date: 14 Mar 2005 07:47:03 -0000
: From: (e-mail address removed)
: To: (e-mail address removed)
: Subject: Virus: failure notice
^^^^^^ <-- added by my ISP's filter
: X-CCN-MailScanner-Information: Please contact the ISP for more information
: X-MailScanner: Virus Infected
: X-Is-Spam: not spam, SpamAssassin (score=4.128, required 5, AWL 0.26,
: BAYES_50 1.57, NO_REAL_NAME 0.01, UNIQUE_WORDS 2.27,
: UPPERCASE_25_50 0.03)
: X-MailScanner-SpamScore: ssss
: X-MailScanner-From:
: Message-Id: <[email protected]>
: Return-Path: <>
: Status: RO
: X-Status:
:
: Warning: This message has had one or more attachments removed
: Warning: (data.exe).
: Warning: Please read the "VirusWarning.txt" attachment(s) for more
: information.
:
: Hi. This is the qmail-send program at lobster.firetrust.com.
: I'm afraid I wasn't able to deliver your message to the following
: addresses.
: This is a permanent error; I've given up. Sorry it didn't work out.
:
: <[email protected]>:
: Sorry, no mailbox here by that name. vpopmail (#5.1.1)
:
: --- Below this line is a copy of the message.
:
: Return-Path: <[email protected]>
: Received: (qmail 16037 invoked from network); 14 Mar 2005 07:44:20 -0000
: Received: from unknown (HELO chebucto.ns.ca) (218.24.142.194)
: by lobster.firetrust.com with SMTP; 14 Mar 2005 07:44:20 -0000
: From: (e-mail address removed)
: To: (e-mail address removed)
: Subject: Error
: Date: Mon, 14 Mar 2005 15:42:19 +0800
: MIME-Version: 1.0
: Content-Type: multipart/mixed;
: boundary="----=_NextPart_000_0003_BD09DF8E.9F22C21C"
: X-Priority: 3
: X-MSMail-Priority: Normal
:
: This is a multi-part message in MIME format.
:
: ------=_NextPart_000_0003_BD09DF8E.9F22C21C
: Content-Type: text/plain;
: charset="Windows-1252"
: Content-Transfer-Encoding: 7bit
:
: The message contains Unicode characters and has been sent as a binary
: attachment.
:
:
: ------=_NextPart_000_0003_BD09DF8E.9F22C21C
: Content-Type: application/octet-stream;
: name="data.exe"
: Content-Transfer-Encoding: base64
: Content-Disposition: attachment;
: filename="data.exe"
:
: TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
: [BIG SNIP of infectious worm]
: aWJyYXJ5QQAAAAAAAAAAAAAAAABsjwQAXI8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
:
: ------=_NextPart_000_0003_BD09DF8E.9F22C21C--


Note that pine on my ISP's system couldn't decode the attachments as they
were included as plain text (and that is probably also why the virus
filter couldn't delete the "attachment" even though it claimed "This
message has had one or more attachments removed" -- this problem has since
been fixed once I pointed it out to the tech team). HOWEVER (!!), there
are a number of mailers out there with broken MIME handling (webmail
applications that include a footer with unquoted '=' characters in a
message sent as quoted-printable is one offender) that result in messages
that pine can't decode. A recommended workaround is to download the raw
messages and use UUDEVIEW or a similar utility to extract the attachments.
In the case of the Firetrust messages, UUDEVIEW successfully decoded and
extracted the infectious worms and the bounces from Firetrust could have
caused a less suspicious user to get infected.

Oh, and good luck on getting any contact information for them from a
whois lookup.

 

[James Egan]

Very little escapes MW's attention, and when it does, I blacklist it
and then tell MW to "learn", which means it updates the Bayesian
filter.

The problem is with people who use auto-responders and actually think
their reply is going to the intended recipient.


Jim.

 

[Bob]

The problem is with people who use auto-responders and actually think
their reply is going to the intended recipient.

One of the things I objected to with MW was their recommendation to
"bounce" spam. All that does is increase spam because the return
addresses are more spam victims. IOW, if a spammer sends me junk email
and uses your email address as the reutrn, and I bounce it, you will
get it. That has the prospect of doubling the amount of spam.

I therefore shut off "bouncing" in MW.


--

Map of the Vast Right Wing Conspiracy
http://home.houston.rr.com/rkba/vrwc.html

If you can read this, thank a teacher.
If you are reading it in English, thank an American soldier.