Okay, I ran the email tests using OE 5.5 with the latest security patches from Microsoft. Avast email scanner did not detect the following tests. Nevertheless, the messages that Avast did not detect were unable to do what they were intended to do except for the EICAR fragmented file test. The others that Avast did not detect AND had attachments were blocked by Script Sentry when I tried to open them. On each test that Avast gave a warning I selected the "delete" option.
o Fragmented Message test (detected but allowed to download single intact file)
o Attachment with no filename vulnerability test
o Long Filename vulnerability test
o Popup Object Exploit vulnerability test
I also ran the test using Mozilla Thunderbird 0.3. Avast detected all the tests except for the following of which Thunderbird did not download from the server.
o Attachment with no filename vulnerability test
o Long Filename vulnerability test
o Popup Object Exploit vulnerability test
So the tests should be viewed as a combination of Avast email scanner results and the security levels incorporated within the emial client software itself. In which case, none of the tests were allowed to complete their tasks except in the case of Outlook Express, in which case, the added layer of Script Sentry came in handy and prevented the last layer of "offense" from occuring.
