Antivirus - Antivirus software - Data loss threatens!
The problem
The mbox format, which uses Thunderbird, stores the e-mails in a large text file - easily readable for all, including virus scanners. Anyone who has ever been to a 600 megabyte text file of a spelling error? So similar, the virus scanner before - he looks for known patterns using a familiar template. Will he be a virus, it is first accessed the file is blocked. Then, depending on the configuration and virus scanners either the file is deleted, moved or there’s a warning on the screen (”File xyz is with the virus infects x), and we must take the decision themselves.
Unfortunately, even when blocking access to the file the mbox irreparably damaged.
Other e-mail programs are usually only reason not affected because the virus scanner is not the most laid open format of the file format used can not read. An example is Microsoft Outlook, which encrypts files stored - this virus scanner can simply no viruses, and therefore no unintentional damage.
Avoiding problems
For most virus scanners can directories before the so-called “OnAccess access (for access, Guard or other terms are also in circulation) exempt. This should be done with the complete profile directory, including the directory in which the file Profiles.ini.
On http://agsm.de/forum/viewforum.php?f=14 found for some virus scanners illustrated instructions on how the profile directory is excluded from scanning.
Test the profile exclusion
Tested can be successful exclusion with various methods.
Important Note:
Before the following steps, please remember that at this time the profile directory already excluded should be, and the virus scanner does not automatically delete files, due to data loss!
* Create a Eicar test virus directly in the profile directory - that the program can be used AV_Test, which is at the following address can download: http://www.agsm.de/thunderbird/downloads/AV_test.exe
* The Eicar test virus via e-mail. Here is the test: http://www.heise.de/security/dienste/emailcheck/demos/go.shtml?mail=eicar
In both cases, a EICAR test virus. Eicar stands for “European Institute for Computer Anti-Virus Research” and was registered in 1991 as a club in
All accounts away
Even in this case, unfortunately, often slammed the virus scanner - this was in the file Prefs.js an allegedly defective code detected. This happens fairly often, unfortunately, without the actual file is infected. First, find a similar profile file in the directory - to the syntax-1.js Prefs (the number varies, depending on how often already occurred in this profile.)
The e-mails are in the vast majority of cases still here. You can, for example, with the extension Import Export tools (enhanced Mboximport) in a new profile to be imported. Another possibility is to create a Prefs.js with a new profile, adjust accounts and settings by directly editing the Prefs.js and then Re-copying in the old profile (this option is only for experienced users really an option). For exclusive use of the local folder can also be a template by http://agsm.de/index.php?option=com_content&task=view&id=14&Itemid=73 obtained. As separate inboxes outside the local folder, and the file path of the e-mail accounts, account names depends, is a template, which includes separate inboxes, unfortunately not possible.
Other hints and tips
In any case, one should also Antivirus settings Thunderbird version 1.5 view. Here is an option, which makes it problematic if virus scanning e-mails scanned at the reception.
This is the first e-mail in standard Temp folder of the operating system as newmsg-x stored. Here, the virus scanner to intercept e-mail and, if necessary, delete it. Only e-mails that have mastered this hurdle, then come into the mbox file from Thunderbird.
Source: http://www.thunderbird-mail.de/wiki/Antivirus-Software_-_Datenverlust_droht
Tags: Antivirus