|
|
This component is not included into Dr.Web for Windows Server. |
SpIDer Mail for Windows workstations with its default settings automatically intercepts all calls of any mail programs of your computer to POP3-servers over port 110 standard for this protocol, to SMTP-servers over port 25 standard for the protocol, to IMAP4-servers over port 143 standard for the protocol, and to NNTP-servers over port 119 standard for the protocol.
The program is included by default into the installation kit, is memory-resident and automatically restarts at Windows startup.
Any incoming message is received by this anti-virus mail guard instead of the mail client and is checked for viruses to the maximum level of detail. If no viruses or suspicious objects are found, it is transferred to a mail program "transparently", as if it were received directly from the server. The same way outgoing messages are checked before they are sent to the server.
The program's reaction to infected incoming messages and to unchecked messages (for example, those with complicated structure), is by default as follows:
| · | messages infected with viruses are not delivered, the mail program is notified of the message's deletion, the server is notified of the message's accepting (this action is called the deletion of a message); |
| · | messages with suspicious objects are placed as separate files to the quarantine folder, the mail program is notified about it (this action is called moving a message); |
| · | unchecked messages are let pass, as well as not infected messages; |
| · | all deleted and moved messages are also deleted from the POP3 or IMAP4 server. |
Infected or suspicious outgoing messages are not sent to the server, the user is notified of the refusal to send the message (while, as a rule, mail programs store such messages).
If there is an unknown virus distributing through e-mail, the program can detect the signs of the virus-like "activity" (mass mailing). By default, this option is enabled.
SpIDer Mail uses the Vade Retro spam filter which allows scanning mail for spam messages. By default, this option is enabled.
|
|
Mail is checked for spam if the Dr.Web application is licensed to work in the "Anti-virus + anti-spam" mode (authorized by the key file). |
The default program settings are optimal for beginners and secure the maximum protection level while users interference is minimal. Still, some options of mail programs are blocked (for example, sending messages to several addresses can be interpreted as mass mailing, and the mail will not be scanned for spam). Useful information cannot be retrieved from automatically destroyed messages (from their uninfected part). More experienced users can modify mail check parameters and the settings of the program's reactions to events.
In certain cases automatic interception of POP3, SMTP, IMAP4 and NNTP connections is impossible; in such cases the program allows to enable the interception of connections manually.
The SpIDer Guard monitor and the Scanner can also detect viruses in mail boxes of certain formats, still, SpIDer Mail has certain advantages as compared with these programs:
| · | not all formats of mail boxes of popular mail programs are supported by SpIDer Guard and the Scanner; on the contrary, when SpIDer Mail is used, infected messages do not even enter mail boxes; |
| · | SpIDer Guard does not check mail boxes by default, enabling this option considerably degrades the systems performance; |
| · | the Scanner checks mail boxes, but only at a users request or as scheduled, and not the moment mail is received. This action is rather labor- and time-consuming. |
Thus, with the default settings, SpIDer Mail is the first to detect viruses and suspicious objects propagating through e-mail and does not let them penetrate computers. Its systems resources consumption is low; other components' operation is often not needed during mail files checking.