Author Topic: Prevent mass mailing worms from sending mail  (Read 4873 times)

0 Members and 1 Guest are viewing this topic.

dil

  • Guest
Prevent mass mailing worms from sending mail
« on: April 10, 2012, 01:07:50 PM »
hi,

is there a rule in Avast to disallow or allow programs to send mass email?

I use the term "Prevent mass mailing worms from sending mail" because before moving to Avast we were on McAfee and to allow a locally developed program to export it's data via mass email it's program executable name was added the to a list of exceptions under the rule > Anti Virus Standard Protection > Prevent mass mailing worms from sending mail

Regards

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Prevent mass mailing worms from sending mail
« Reply #1 on: April 10, 2012, 02:16:57 PM »
It was there a long time ago... On version 4 if I remember correctly. It was a setting to block identical emails (for instance, http://forum.avast.com/index.php?topic=36871.msg308863#msg308863). It's not there anymore into the Mail heuristics... (see a David's picture http://forum.avast.com/index.php?topic=14632.msg147961#msg147961).
The best things in life are free.

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89420
  • No support PMs thanks
Re: Prevent mass mailing worms from sending mail
« Reply #2 on: April 10, 2012, 04:06:33 PM »
I think that the Mail Shield in avast6/7 with Heuristics set to High may still have that same effect of blocking/alerting even though it isn't listed/configurable.

Though I haven't seen many instances of undetected/hidden mass mailing bots reported in the viruses and worms forum. Obviously I have no way of testing this short of infecting my system with a mass mailing bot to test the theory.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Prevent mass mailing worms from sending mail
« Reply #3 on: April 10, 2012, 04:58:39 PM »
I think that the Mail Shield in avast6/7 with Heuristics set to High may still have that same effect of blocking/alerting even though it isn't listed/configurable.
Good memory as usual. Maybe any of the programmers could confirm this.
The best things in life are free.

dil

  • Guest
Re: Prevent mass mailing worms from sending mail
« Reply #4 on: April 11, 2012, 10:54:59 AM »
Thanks, http://forum.avast.com/index.php?topic=14632.msg147961#msg147961 the image shows exactly the kind of setting I want to tune in Avast.

Is there no custom way to add such setting in Avast 6?

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89420
  • No support PMs thanks
Re: Prevent mass mailing worms from sending mail
« Reply #5 on: April 11, 2012, 12:37:40 PM »
That specific setting dropped out in avast6, but as I said it is possible that having the Heuristics set to High in the Mail Shield may well still detect the presence of an undetected/hidden mass mailing bot. But I have no way of testing that theory short of infecting my system.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security