1st Email Anti-Virus 4.0 Help www.zzee.com | Support | You are here: Contents >

1. Introduction

Designed for discreet users who appreciate data integrity and privacy, 1st Email Anti-Virus is the only POP3-compatible content-filtering security software that copes with all threats of modern (HTML-based and MIME) email messages.

Most popular email client programs don't allow to turn off HTML mode, so most users are vulnerable to viruses and deliberate attacks. Conventional antivirus programs don't close this gap too.

1.1. Quick Facts

* The following programs were tested: Norton Antivirus 2003, McAfee VirusScan Professional 6.02.
** The following programs were tested: Outlook Express 6.0, Outlook Express 5.5, Outlook 2000. Outlook XP / 2002 is reported to be vulnerable to similar attacks.
*** This is the most used type of attack, that uses iframe and then either MIME header or CLSID file extension trick. This vulnerability is exploited by many worms / viruses, including Klez, Nimda and others. The file is either executed automatically on message view, or a dialog pop-ups asking if to open or save a file.
**** Outlook 2000 is vulnerable to iframe based CLSID file extension attack, but MIME header attack may either succeed or fail, depending on the content-type value used and browser's settings. Typical browser configuration allows MIME header attack with "audio/x-wav" header.
***** While generic antivirus programs may recognize known viruses in scripts or exe files that are executed by email client, they don't block the possibility of the execution itself, leaving the user with the risk of executing malicious code that is not recognized as a virus.

1.2. 1st Email Anti-Virus Benefits

• Protects from any known attacks on HTML or MIME emails used by viruses to spread themselves, preventing them from being executed and re-distributed automatically. Those attacks include, but not limited to:
• Iframe attacks. This is the mostly dangerous one.
• Script attacks: JavaScript, VBScript, etc.
• Embedded objects and plug-ins: ActiveX, Java, Flash attacks.
• Protects user privacy with the ability to remove inline downloads (also known as "web bugs").
• Keeps the readability of the message and retains all information sent.
• Retrieves and handles oversize messages without blocking, thus protecting from denial-of-service attacks (such as the mail bombing).
• Typically decreases the size of a message, hence minimizing the storage requirements.
• Works transparently with any POP3 compatible email program, such as MS Outlook, Outlook Express, Eudora, The Bat!, etc. Supports several email clients and accounts simultaneously.
• Has an ability to enforce plain text, and thus it is suitable for those who use old plain text email software or who dislike HTML email.
• Has full logging capabilities: can save original messages and log protocol commands.
• Compatible with signed or encrypted messages (S/MIME).
• Can work together with other antivirus and antispam programs.

1.3. Requirements

Windows 95 / 98 / ME / NT 4.0 / 2000 / XP.

1.4. What email software the program is compatible with

The program is aimed to work transparently with any email client. To determine if your email program is supported, see if it is compatible with the POP3 protocol. Also make sure that your email account is of the POP3 type.

If you use web email account and your service provider allows to download messages via the POP3 protocol to your desktop email program, like yahoo.com does, then you can use the program in conjunction with your web based email account and the email client software. See the provider's instructions how to set up POP3 capabilities with your web email account.

The program supports multiple accounts simultaneously.

The program is also able to work together with other antivirus and antispam programs, effectively enhancing your protection.

See also: How to set up email client.