OneCare quarantined entire mailbox

[Simon Greener]

Hi,

Using OneCare 1.0.0971.20. The anti-virus quarantined my inbox file as
I had received a trojan in an attachment. That is not uncommon so the
fact that it takes the whole mailbox file out, effectively deleting all
the mail is not acceptable.

I reported to OneCare support; a nice lady replied today. This has been
reported by other beta testers and it has been passed on to the team.

To help others who get this try the following. Configure OneCare
antivirus to ignore your mailbox files. Not great but at least you will
keep your email. Obviously you can restore the quarantined file but if
you received any email since the file was quarantined (like the next
time you open your email program) those messages are lost.

So, come on Microsoft. More intelligent email quarantine or a
mailserver proxy. Do it or loose it (the customers).


Simon Greener
Beverley
UK

 

[Bill Sanderson MVP]

I've seen similar behavior and agree with this critique.

 

[Dave M]

Sorry about that Simon;
~rant on~
One of the *major* reasons WLOC did not get my $19.95 subscription, was
this little peculiarity, along with it's inability to scan certain packaged
files like SpywareBlaster. I reported this during Beta on 11/03/2005, and
both were closed for reason: pending future consideration.

What gets me a bit further annoyed is, that now it's seven months later,
it's gone retail, their have been more that a few reports of this problem,
and though I personally excluded all DBX files, you have to do them one at
a time... No folder exclusions within WLOC. So each time I create a new
Outlook Express folder for my email... I have to find the deeply buried
location of these DBX files and exclude it individually.

The expert opinion is that the way DBX folders are constructed, there's no
way a virus could run when contained in that format, it's like a zip file.
I say take a clue from Defender, it's fine if you want to warn me, but
don't break my database by quarantining or else give me an option to
exclude by file extension or folder at the very least.
~rant off~

 

[Guest]

Simon and Dave, your rants have merit and would get attention from the One
care team if you would post them here -
http://forums.microsoft.com/windowsonecare/default.aspx?siteid=2

 

[Dave M]

Jim,

Sorry, we're way off topic, but here's a quick quote for you from that very
forum:

"I do hope that WOC fixes this soon or there will be many unhappy users
with mailboxes toasted."

sboots, MSN MVP / Windows OneCare Forum Moderator - referring to the WLOC
email database scan, posted on 3 April 2006