Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rrd_1984 on June 29, 2012, 04:25:18 PM
-
Before I want to say sorry if my english is not good. I've a little problem, all days I receive a email with attach an archive, this archive is in format .mht
The Avast show this message
"[avast! heurÃstica - ADVERTENCIA] "----------" [avast! heuristic - WARNING] "
The program delete the archive and me can't open the file.
Could someone help me, please?
-
Could someone help me, please?
What do you want to know..??
-
The .mht format is an archived copy of a web page, it contains all of the images and scripts, etc, and can be dangerous when opened as these would be executed. It is also a bit strange when used in emails.
Do you know the source of this email and why they would attach an mht file (?), if either of these answers is no or don't know, then you shouldn't open this attachment anyway. Essentially avast is saying it is suspicious not infected as such.
If you can answer yes to both (and it is easy to fake the source, from address) and you accept the associated risk, you can modify the Mail Shield, Expert Settings, Mail Heuristics, Attachment check, but that would have an impact on all attachments.
-
Yes, I know the source of this email and the reason.
My version is 7.0.1451
-
Then it is your choice/risk to disable that check and have them send the email again as the original will have had the attachment removed (I believe).
-
I don't understand your request. What have to do for put this sender on a "clean" list. I know that the archive is safe.
-
I have not told you how to put the sender in a white list as there is no white listing in the avast free mail shield.
The only white listing is in the avast Pro/AIS versions and that is in the anti-spam module, which I don't believe would effect the standard mail shield alerts.
-
Ok thank so much for your answer.
-
The only option is what I said in Reply #2 last paragraph, but that effects all emails with attachments not just .mht ones, this could mean a little more risk.
But you should never open an attachment directly from an email, save to the hard disk and scan it before ever opening it reduces the risk slightly. But as I said a .mht file "is an archived copy of a web page, it contains all of the images and scripts, etc, and can be dangerous when opened as these would be executed.
-
If Avast Premier has blocked an incoming email mht attachment is it possible to retrieve it without asking for it to be re-sent?
-
It most cases it isn't possible to retrieve it (if you mean from the chest) as it may not be able to insert it into the email file folder (depending on the email program in use ?).
So essentially you will have to take the actions already outlined in this topic and have the email resent. The other difference being that in the Premier version you may be able to add the email address to a white list, but that may only be in the anti-spam module rather than the mail shield (I don't use the Premier version) and as such may not stop the detection.
-
Thanks the Avast email [avast! heuristic - WARNING] does not give the time sent, only the time processed locally, so it makes it harder to ask for a re-send.
The email does not seem to be in the virus chest with the viruses.
I had done a submission on line and wanted to email the page of my submission to a third party. I attached the mht page to a Thunderbird message and when I tried to send there was some sort of warning about difficulty sending but eventually the message was in my sent box. However it had not been received. I found I was later able to send it by stopping Premier mail shield. It got through AVG at the receiving end. But a copy I sent back to myself could not get through back to me.
I think more warnings are in order.
What should I have known?