Suspicious Message warning

Avast Free Antivirus / Premium Security
1

Hi

I was just checking my mail and have a avast! suspicious message warning.

Do I select delete or continue.

Is delete going to delete the message or delete the warning?

Is continue going to continue loading the emails or continue as in getting rid of the possible problem?

Block it is grayed out.

Thanks

Hi again. Also, can someone post a link to the manual/instructions for avast!?

I’ve looked around the site and can’t find it. It’s probably right in plain site but I don’t see it.

OK, I found the data sheets. But when I click on one to download I just get a white page. I am using firefox and winxp.

2

Me again. I found a link on the web site map that says tutorials but it’s also a whilte page.

I thought maybe it’s my browser so I opened IE and it’s the same thing. :frowning:

3

Suspicious message warnings come from Heuristic tab of settings (Internet Mail provider).
Open the provider and check your Heuristic settings.
Which is the reason given in the message?

4

suspicious message white space sequence

then it gives the info on the sender and the email subject etc.

5

I had to go google what Heuristic settings means.

So it may not be a problem?

6

No… LEFT click the avast blue icon on system tray.
Click on buttom DETAILS.
At left check the Internet Mail provider and at right click on CUSTOMIZE buttom.
Then you’ll see the settings.
Go to the Heuristic tab of settings and configure them.
More info about the options on help files.
If you don’t know how to manage, disabe Heuristics…

7

White spaces are often used in either subject or attachments to try and disguise the true content. There really shouldn’t be a legitimate reason to do it so it is flagged as suspicious, the one thing about it is at least it wasn’t detected as a virus.

If you don’t recognise who it came form and can’t confirm who it came from (contact them by another means) then the easiest and safest thing to do is delete it.

Open the Internet Mail on-access interface and click the Customize button, Heuristics to see what is checked. See the avast! help file, Resident Protection, Internet Mail, Heuristic Page.

Check whitespaces sequence. Some viruses use a trick: behind one extension of the infected file name a large number of spaces (or other nondisplayable, "white" characters) is appended, followed by a second, real extension that is dangerous. The user does not see the second extension (it is several lines below or does not fit into the window where names are displayed). Heuristic analysis can uncover this trick and warn the user. Default permitted sequence length is five. Thus, if there are more than five white characters, a warning message will be displayed.
8

Thanks for the info. I did find it and the options available were low, medium, high, custom and a place to tick silent mode…no disable.

I set it to low.

9

:slight_smile: Hi Calico :

 Around Apr of this yr "RejZor" posted a "Proactive
 Protection Guide", which included a "Internet Mail Proactive
 protection" section near the end. You can view this at :

 http://forum.avast.com/index.php?topic=20412.0 .