Kaspersky AV and Eudora Email Problem

[MHenry]

Hi,

I use Kaspersky AV 4.05.35 to scan my email messages on download.
When Kaspersky finds a virus it cannot disinfect, it deletes my entire
in mailbox!

How can I avoid this?

Thanks
MHenry

 

[Dale]

I use KAV 5.0 with current level of Eudora Pro (paid version), and I have
never had a similar problem. I have certainly received my share of worms.

Dale

 

[MHenry]

I wonder if KAV 5.0 operates differently than KAV 4.05.35 when
scanning email messages?

Once my in.mbx gets deleted, Eudora and Kaspersky seem to combine to
eat my incoming email messages, so I lose not only what I have
accumulated in my "in" mailbox (which is nothing now!), but all my
incoming mail for the day.

I removed the email scanning portion of Kaspersky as a workaround, and
rebooted, but Kaspersky still checked my email messages as they were
coming in and detected a virus, and threatened to delete my "in"
mailbox again, but somehow it didn't get deleted.

I closed out of Eudora using task manager in hopes on not getting all
my incoming messages eaten.

When I rebooted, I removed Kaspersky's script checker and rebooted
again.

If Kaspersky still scans my email messages after that, I may remove it
from my system completely.

Thanks for the reply,
MHenry

 

[Gabriela Salvisberg]

I wonder if KAV 5.0 operates differently than KAV 4.05.35 when
scanning email messages?

Yes. KAV 5.0 has some other approach than 4.x to catch infected
e-mails.

Once my in.mbx gets deleted, Eudora and Kaspersky seem to combine to
eat my incoming email messages, so I lose not only what I have
accumulated in my "in" mailbox (which is nothing now!), but all my
incoming mail for the day.

[snip]

Try it. Your KAV 4.x key file should work with KAV 5.0 as well.

If Kaspersky still scans my email messages after that, I may remove it
from my system completely.

To test this, install KAV 5.0. Disable it from the system tray. Send
yourself an e-mail with an Eicar Test file in it (see www.eicar.org)
and immediately close your e-mail app after the Eicar mail left your
outbox. Switch KAV 5.0 e-mail scanning back on. Retrieve your e-mails,
now your Eicar test mail should be retrieved from your POP3 account
and immediately removed by KAV 5.0, without deleting your complete
Eudora inbox.

I haven't Eudora, so I couldn't test this by myself. But I think this
should work as expected.

HTH
Gabriela

 

[Criminal Element]

Hi,

I use Kaspersky AV 4.05.35 to scan my email messages on download.
When Kaspersky finds a virus it cannot disinfect, it deletes my entire
in mailbox!

How can I avoid this?

Exclude the mailboxes by there extention. This could be KAV's on access (not e-mail)
scanning doing the deed with the mailbox when file is accessed.
You probly dont want to ever delete quaranteen or repair mailbox anyway.

 

[MHenry]

Yes. KAV 5.0 has some other approach than 4.x to catch infected
e-mails.

I neglected to mention I have the pro version, but still... there is a
newer version I could try.

Once my in.mbx gets deleted, Eudora and Kaspersky seem to combine to
eat my incoming email messages, so I lose not only what I have
accumulated in my "in" mailbox (which is nothing now!), but all my
incoming mail for the day.

[snip]

Try it. Your KAV 4.x key file should work with KAV 5.0 as well.

If Kaspersky still scans my email messages after that, I may remove it
from my system completely.

To test this, install KAV 5.0. Disable it from the system tray. Send
yourself an e-mail with an Eicar Test file in it (see www.eicar.org)
and immediately close your e-mail app after the Eicar mail left your
outbox. Switch KAV 5.0 e-mail scanning back on. Retrieve your e-mails,
now your Eicar test mail should be retrieved from your POP3 account
and immediately removed by KAV 5.0, without deleting your complete
Eudora inbox.

This is an interesting suggestion.

Thank you very much for your thoughtful and detailed help.

Sincerely,
MHenry

 

[MHenry]

Exclude the mailboxes by there extention. This could be KAV's on access (not e-mail)
scanning doing the deed with the mailbox when file is accessed.
You probly dont want to ever delete quaranteen or repair mailbox anyway.

Hmmm.I hadn't thought of that. I changed the settings in my on access
scan to "ask user", but I couldn't find where to exclude mailbox file
extensions. Could you point me to that setting, please?

Thanks for your help.

MHenry

 

[Criminal Element]

Hmmm.I hadn't thought of that. I changed the settings in my on access
scan to "ask user", but I couldn't find where to exclude mailbox file
extensions. Could you point me to that setting, please?

Don't know the setting cause I don't use Kaspersky AV but most AV proggies
have include or exclude options in there config. Maybe somebody using Kaspersky AV
can point the way.