Kaspersky blocks IMAP
Todd and Margo Chester
OS: Windows XP Pro, SP3
TH: 3.1.5 for Windows
Kaspersky Internet Security Suite: kis11.0.2.556en.exe
Does anyone know how to force Kaspersky to stop blocking
IMAP?
I have tried disabling mail checking. That works for a
while and stops.
I have tried disabling everything, including the firewall,
and that does not work at all.
I have tried adding Thunderbird to the Trusted Zones with
all checking disabled. Doesn't do a thing.
The only consistent thing is to "pause" Kaspersky. Then
IMAP works.
Very frustrating,
-T
Jay Garcia
--- Original Message ---
Suggest you try in the KAV Forum: http://forum.kaspersky.com/
--
*Jay Garcia - Netscape/Flock Champion*
www.ufaq.org
Netscape - Firefox - SeaMonkey - Flock - Thunderbird
Todd and Margo Chester
> On 26.10.2010 11:51, Todd and Margo Chester wrote:
>
> --- Original Message ---
>
>> Hi All,
>>
>> OS: Windows XP Pro, SP3
>> TH: 3.1.5 for Windows
>> Kaspersky Internet Security Suite: kis11.0.2.556en.exe
>>
>> Does anyone know how to force Kaspersky to stop blocking
>> IMAP?
>>
>> I have tried disabling mail checking. That works for a
>> while and stops.
>>
>> I have tried disabling everything, including the firewall,
>> and that does not work at all.
>>
>> I have tried adding Thunderbird to the Trusted Zones with
>> all checking disabled. Doesn't do a thing.
>>
>> The only consistent thing is to "pause" Kaspersky. Then
>> IMAP works.
>>
>> Very frustrating,
>> -T
>
> Suggest you try in the KAV Forum: http://forum.kaspersky.com/
I did. Not having much luck. :'(
Mike Easter
> OS: Windows XP Pro, SP3
> TH: 3.1.5 for Windows
> Kaspersky Internet Security Suite: kis11.0.2.556en.exe
>
> Does anyone know how to force Kaspersky to stop blocking
> IMAP?
Is your IMAP secure connection, ie STARTTLS?
> I have tried disabling mail checking. That works for a
> while and stops.
I agree. Any AV should not be doing realtime in/out mail scanning.
> I have tried disabling everything, including the firewall,
> and that does not work at all.
>
> I have tried adding Thunderbird to the Trusted Zones with
> all checking disabled. Doesn't do a thing.
>
> The only consistent thing is to "pause" Kaspersky. Then
> IMAP works.
The general picture in the Kaspersky vs Tbird disagreement is that the
Tbird/moz.mess developers have told Kaspersky about the problem
(according to the Tbird forum) and the Kaspersky developers have some
ideas about how to configure Tbird so that Kaspersky will be able to
scan Tbird's in/out mail.
A couple of places in the kaspersky forum say -1- disable
mail.server.default.fetch_by_chunks in Tbird -or/but- another says -2-
do not check encrypted connections -and/but if that doesn't work- -2b-
enable compatibility mode (in Kaspersky).
http://support.kaspersky.com/faq/?qid=208281595 How Kaspersky PURE
works with the mail client Mozilla Thunderbird 1.5 and above 2010 Mar 31
http://forum.kaspersky.com/lofiversion/index.php/t58064.html
kav6.0.3.837, IMAP/TLS and Thunderbird, just stall - 2008 Feb
--
Mike Easter
Todd and Margo Chester
> Todd wrote:
>
>> OS: Windows XP Pro, SP3
>> TH: 3.1.5 for Windows
>> Kaspersky Internet Security Suite: kis11.0.2.556en.exe
>>
>> Does anyone know how to force Kaspersky to stop blocking
>> IMAP?
>
> Is your IMAP secure connection, ie STARTTLS?
No. All turned off
>
>> I have tried disabling mail checking. That works for a
>> while and stops.
>
> I agree. Any AV should not be doing realtime in/out mail scanning.
Turning off mail scanning only worked for a day. Now the problem
is back and mail scanning is still turned off.
>
>> I have tried disabling everything, including the firewall,
>> and that does not work at all.
>>
>> I have tried adding Thunderbird to the Trusted Zones with
>> all checking disabled. Doesn't do a thing.
>>
>> The only consistent thing is to "pause" Kaspersky. Then
>> IMAP works.
>
> The general picture in the Kaspersky vs Tbird disagreement is that the
> Tbird/moz.mess developers have told Kaspersky about the problem
> (according to the Tbird forum) and the Kaspersky developers have some
> ideas about how to configure Tbird so that Kaspersky will be able to
> scan Tbird's in/out mail.
>
> A couple of places in the kaspersky forum say -1- disable
> mail.server.default.fetch_by_chunks in Tbird -or/but- another says -2-
> do not check encrypted connections -and/but if that doesn't work- -2b-
> enable compatibility mode (in Kaspersky).
No joy. :'(
>
> http://support.kaspersky.com/faq/?qid=208281595 How Kaspersky PURE works
> with the mail client Mozilla Thunderbird 1.5 and above 2010 Mar 31
>
> http://forum.kaspersky.com/lofiversion/index.php/t58064.html
> kav6.0.3.837, IMAP/TLS and Thunderbird, just stall - 2008 Feb
At this point, I am thinking my only alternative is to pull
Kaspersky out and replace it with Avira. Avira is not where
as good as Kaspersky, but at least you can eMail.
Thank you for the help.
-T
Mike Easter
> Mike Easter wrote:
>> The general picture in the Kaspersky vs Tbird disagreement is that the
>> Tbird/moz.mess developers have told Kaspersky about the problem
>> (according to the Tbird forum)
> At this point, I am thinking my only alternative is to pull
> Kaspersky out and replace it with Avira. Avira is not where
> as good as Kaspersky, but at least you can eMail.
Which AV is 'better' than which other comparable AV is a personal
opinion and is also influenced by what/which 'metric' you choose to use.
By the metrics used by AV Comparatives, which has a strong reputation in
the field, their 2010 comparative ranked Avira above Kaspersky, calling
Avira Advanced+ and Kaspersky Advanced.
The details of the comparison can be seen at their site.
--
Mike Easter
Jay Garcia
--- Original Message ---
In the system tray, right-click on the KAV icon and select "Pause
Protection" and then try your email again. Are you aware of any
server-enabled AV applications such as ClamAV, etc. that may be at fault
here? SpamAssassin?
Mike Easter
> Avira Advanced+ and Kaspersky Advanced.
... which was principally because they rated Avira few false positives
and fast scanning speed while they rated Kaspersky many false positives
and average scanning speed. I consider the 'capture rate' difference;
Avira 99.8% vs Kaspersky 98.3% to be less important but that might be
bothersome to someone, ie 8x as many misses.
In missed samples, Avira was 3rd best, Kaspersky 13th of 20.
--
Mike Easter
Jay Garcia
--- Original Message ---
OT, somewhat
Which version of KAV? Been running it for years and just upgraded to
v2011. Who is "they" rated ?
Mike Easter
> Mike Easter wrote:
>>> Avira Advanced+ and Kaspersky Advanced.
> Which version of KAV? Been running it for years and just upgraded to
> v2011. Who is "they" rated ?
This was the 2010 AV On-Demand Comparatives
http://www.av-comparatives.org/comparativesreviews/main-tests
specifically the .pdf
http://www.av-comparatives.org/images/stories/test/ondret/avc_od_aug2010.pdf
using Kaspersky Anti-Virus
11.0.1.400 (a)
The .pdf specifies how each AV was configured according to the
guidelines/ recommendation of each developer.
I'm not trying to put down Kaspersky, I was just rebutting (or
'neutralizing' :-) the statement
<Todd>
> Avira is not where
> as good as Kaspersky,
</Todd>
... since I use Avira on some (but not all) of my Win systems :-)
--
Mike Easter
Carl Drud
> Which version of KAV? Been running it for years and just upgraded to
> v2011. Who is "they" rated ?
Ver. 2011.
http://www.av-comparatives.org/comparativesreviews/main-tests
--
Carl
Todd and Margo Chester
Wow. That makes two of use that use AV Comparatives. I thought
I was the only one!
Thank you for reminding me. I do not feel so bad switching them out.
Kaspersky's suite has a lot of nice features but does score
ever so slightly below Avira in virus detection. If memory serves
me correctly, Avira does win the boobie prize for false positives
though.
I use Avira whenever their are financial problems, such as charity
work.
-T
Todd and Margo Chester
Kaspersky is getting worse. They use to be tops a few years
ago. Maybe this will get their attention. They could fix
their Thunderbird IMAP problems while they are at it.
-T
Todd and Margo Chester
> Which version of KAV? Been running it for years and just upgraded to
> v2011.
kis11.0.2.556en.exe, which is version 11.0.2.556.
Todd and Margo Chester
> In the system tray, right-click on the KAV icon and select "Pause
> Protection" and then try your email again. Are you aware of any
> server-enabled AV applications such as ClamAV, etc. that may be at fault
> here? SpamAssassin?
>
> From my original post:
> The only consistent thing is to "pause" Kaspersky. Then
> IMAP works.
No joy.
Todd and Margo Chester
> server-enabled AV applications such as ClamAV, etc. that may be at fault
No. They do not have such things at this ISP.
Jay Garcia
--- Original Message ---
> I'm not trying to put down Kaspersky, I was just rebutting (or
> 'neutralizing' :-) the statement
Didn't say or think you were, thanks for the links also provided by Carl
Drud.
Jay Garcia
--- Original Message ---
Mine says 11.0.1.400-1429 and I just updated per my reply at 0105 CDT.
Oh, I see you got KIS and I have KAV .. just noticed that. Not that it
makes any difference but which version of the AV is included in that KIS?
Jay Garcia
--- Original Message ---
I see mention of the TB/KAV bug, just remembered that one, guess KAV
hasn't fixed anything yet.
Jay Garcia
--- Original Message ---
Maybe you should lean on 'em a bit. I run my own mail server with many
clients and I feel it important to trap anything malicious "before" it
gets to the user(s).
Christoph Schmees
and why go for second best or less if you can have GData for the
same price or better? As far as I understood the test was about
the *paid* version of Avira. The free version is a toy anyway.
Christoph
--
email:
nurfuerspam -> gmx
de -> net
Christoph Schmees
> Tens of millions of users will not agree with you!
>
> Is this the way for you to "promote" G-Data?
> (by the way, there is nothing wrong with G-Data).
>
> http://www.avira.com/en/support-download-free-antivirus
> http://www.gdata.de/
>
> .... and for some years NOD32 was better than G-Data, so I use NOD32.
> http://www.av-comparatives.org/comparativesreviews/main-tests/summary-reports
> ;-)
>
no, I am in no way connected with GData. I just use and recommend
their products I regard as the best currently available.
Why is the free Avira a toy? Because it is missing essential
components the paid version has.
And because it updates automatically only once a day (same as all
free antivirus programs) which is ridiculous. Why do reliable
paid protectors update at least every hour, what do you think?
Just for fun? Tell you what: Many years ago I was user of free
Avira. I received a Mail with an attachment that looked
suspicious to me. Avira guard didn't alarm. I saved the
attachment to a file and told the scanner to check it. Still no
alarm. Then I updated manually; my previous update had been three
hours ago. And the new update, three hours younger, gave alarm!
Your turn.
Mike Easter
> I received a Mail with an attachment that looked
> suspicious to me. Avira guard didn't alarm. I saved the
> attachment to a file and told the scanner to check it. Still no
> alarm. Then I updated manually; my previous update had been three
> hours ago. And the new update, three hours younger, gave alarm!
> Your turn.
Brand new viral templates are going to be unrecognized by all of the
major engines at first, then by a progressively larger percentage of them.
Everyone should assume that such new templates are going to arise 'all
the time' and further assume that their AV is not going to be 100%
effective; therefore they should have more than one strategy for
avoiding infection.
If I received a mail with an attachment that looked suspicious, I
wouldn't count on my AV to recognize it. I would take it to a site which
uses multiple engines to test it, such as VirusTotal
http://www.virustotal.com/ a service that analyzes suspicious files and
URLs enabling the identification of viruses, worms, trojans and other
kinds of malicious content detected by antivirus engines and web
analysis toolbars. ... This is a list of the companies that participate
in VirusTotal with their antivirus engines. <follows 40 AV companies>
I have taken many agents to such a site at which time various
percentages of various AV agents recognized the template. It is an
eye-opener when people who assume that their AV is going to recognize
all of the threats. It simply isn't true.
--
Mike Easter
Mike Easter
Christoph Schmees wrote:
> I received a Mail with an attachment that looked
> suspicious to me. Avira guard didn't alarm. I saved the
> attachment to a file and told the scanner to check it. Still no
> alarm. Then I updated manually; my previous update had been three
> hours ago. And the new update, three hours younger, gave alarm!
> Your turn.
Brand new viral templates are going to be unrecognized by all of the
major engines at first, then recognized by a progressively larger
percentage of them.
Everyone should assume that such new templates/agents are going to arise
'all the time' and further assume that their AV is not going to be 100%
effective; therefore they should have more than one strategy for
avoiding infection.
If I received a mail with an attachment that looked suspicious, I
wouldn't count on my AV to recognize it or be surprised if it didn't. I
would take it to a site which uses multiple engines to test it, such as
VirusTotal^1
^1 http://www.virustotal.com/ a service that analyzes suspicious files
and URLs enabling the identification of viruses, worms, trojans and
other kinds of malicious content detected by antivirus engines and web
analysis toolbars. ... This is a list of the companies that participate
in VirusTotal with their antivirus engines. <follows 40 AV companies>
I have taken a number of agents to such a site at which time various
percentages of various AV agents recognized the template and some number
didn't. Such a 'test' is an eye-opener to people who assume that their
Christoph Schmees
> On Wed, 27 Oct 2010 12:56:48 +0200, Christoph Schmees
> <cj...@nurfuerspam.de> wrote:
>>> Since when is the free version of Avira Antivir a "toy"?
>>> Tens of millions of users will not agree with you!
>>>
>>> Is this the way for you to "promote" G-Data?
>>> (by the way, there is nothing wrong with G-Data).
>
>
>> components the paid version has.
>
>
http://www.avira.com/de/avira-free-antivirus
(in German, but you will surely find it in English as well.
> ...
> So if you don't mind, I prefer the statistics of AV-Comparatives to your
> exclusive experience.
So do I. And they see GData as number one and Avira (paid
version!) at three - how come?
> ...
Christoph Schmees
> On Wed, 27 Oct 2010 16:51:02 +0200, Christoph Schmees
> <cj...@nurfuerspam.de> wrote:
>> http://www.avira.com/de/avira-free-antivirus
>>
>> (in German, but you will surely find it in English as well.
>
>
> already gave the English (International) download site.
>
yes, the *download* link.
And if you visited the link I gave you could have seen that it
contains a *comparison* between free and paid version. There you
can figure what the *free version is lacking*.
Todd and Margo Chester
> On 26.10.2010 15:34, Todd and Margo Chester wrote:
>
> --- Original Message ---
>
>> On 10/26/2010 01:05 PM, Jay Garcia wrote:
>>> Which version of KAV? Been running it for years and just upgraded to
>>> v2011.
>>
>> kis11.0.2.556en.exe, which is version 11.0.2.556.
>
> Mine says 11.0.1.400-1429 and I just updated per my reply at 0105 CDT.
> Oh, I see you got KIS and I have KAV .. just noticed that. Not that it
> makes any difference but which version of the AV is included in that KIS?
>
It is the same version
Todd and Margo Chester
>
> By the way, it was well a known phenomenon in the Kaspersky forums that
> the 'advanced' KIS was the source of more problems than the basic 'KAV'.
> If Jay is not having problems with IMAP and KAV, I'd concentrate on the
> KIS features for the culprit.
Makes sense