Clean Note

What’s the point of inserting notes in an email that a mail is clean or has been scanned or whatever?

If these gangsters can be doing what they are doing with spam-viruses-hoaxes - etc. - then what is preventing them from issuing their own bona fides?

If someone thinks they won’t (don’t already) do this I wonder if you would please go to your front door and pull in that nice wooden horse I put in your doorway?

Just to be sure (see) they’ve been scanned. To say the others you’re using the best antivirus ;D

Of course, this could be ‘added’ by the bad guys but they will have to know you’re realy using avast, you did not ‘customize’ the notes, etc.
There are other methods to know if the email was scanned.

Also as far as I know the clean notes have and one other purpose. When a clean note is inserted in a message, if the receiver have avast! too and is using Internet Mail Provider or Outlook plug-In, the program of the receirver won’t scan the incoming message signed by avast! when sended, thus saving time of scanning the message (very good in cases of receiving alot of messages). Hope you understand my point ;D

OK - I get it -

But my point is that the bad guys can put all kinds of bona fides in their email - and then hope the recipient ‘trusts’ the mail

(I’m sure they can get all kinds of AV ‘clean notes’ to look like the originals)

The recipient of course of such mail hardly knows the name of Avast, AntiVir etc - so if we start ‘believing’ what we read IN a mail about security - that security hole is going to be big enough to take a whole herd of wooden horses thru.

++

And if I am using an AV I sure want it working on EVERYTHING - I can look out the window for the few seconds/minutes difference - but I am not starting to rely on something having been previously scanned - and would turn off any facility on my AV that would start to accept outside scanning

Well… we already said this… they need to know you use avast, insert notes, that your note is not customized…
It’s unlikely to make a virus that only infects avast users…

Use customized ones 8)

Security is given by the scanning. The sense of security could be done by the clean notes.

avast is working, isnt’t it?

The difference being don’t trust unsolicited, unexpected emails no matter what they say. I don’t even receive unsolicited, unexpected emails I have deleted them a long time before they are ever likely to be read.

For some it may provide a jolt that they should be scanning their email, some AVs don’t have that functionality. So it may provide a little free advertisement for avast ;D

If I send and email to some one I know and the email follows the pattern of other emails I have sent them they may be reassured that I’m using and scanning email content. It I don’t believe it is ever intended to convince people you don’t know.

If people are reading it and they don’t know the sender then it is too late regardless of what might be written they shouldn’t have opened it in the first place. So it has a value but it a limited value.

We never liked the feature too much. That’s why it’s turned OFF in avast by default. However, some people find it useful (maybe they think it makes their emails cooler? :)) and have it turned on (a number of competitive AV programs have it on by default).

HTH :slight_smile:
Vlk

Well, that’s pretty scary ::slight_smile:

It’s quite conceivable that the sender’s system could be infected with something that Avast could not detect or was corrupted but still made to look completely functional. Surely there is an option to scan all e-mail regardless of the source in the module settings?

Best Regards…

EDIT: Looks like Vlk’s post answered my question, just didn’t scroll down enough :wink:

In fact, you can’t exclude a mail for scanning. All or none.
You can only exclude IP:port to be scanned, I mean, avast could by-pass (if you set so) some email client from scanning. Not the senders…

Hi Tech…

That’s what I suspected…I never heard of an AV that took another copy’s (on a different system) word that an e-mail was “safe” just because it said so ;D

No, it really doesn’t work this way - the appended notes are only informative and don’t have any effect on avast! scanning.

On the other hand, there is a feature in avast! Outlook/Exchange plugin that basically does this; if there’s avast! installed on an Exchange server, it can add “signatures” (to the processed messages) confirming that the message was scanned by avast! (and what version of VPS was used). Then, if the workstations are also using avast!, you can configure it not to scan messages signed that way (because it would hardly detect anything else) - so you save some time.

Thanks igor, makes more sense now 8)