Notes on Antivirus Software

Revision as of 14:24, 11 February 2013 by Admin (talk | contribs) (Created page with "__NOTOC__ Due to the various methods of archiving email in MailStore Server and the storage of email using its own highly optimized storage technology, of few notes have to b...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)


Due to the various methods of archiving email in MailStore Server and the storage of email using its own highly optimized storage technology, of few notes have to be followed when using anti-virus programs.

On-Access Scanner

To ensure best possible performance of the storage technology and to prevent issues caused by antivirus software, it is recommended to exclude all archive stores and the location of the master database from on-access scanning. All data in MailStore Server is stored encrypted and compressed and therefore cannot be reliably scanned by antivirus software. In case of false-positives, corruption of an archive store may occur.

Web- and Email Scanner

Depending on the email server, MailStore Server uses the HTTP, POP3 or IMAP protocol to access mailboxes. Most recent antivirus software supports scanning for viruses in those network protocols. Unfortunately they appear to be tested with the most widespread email clients such as Microsoft Outlook and Mozilla Thunderbird only. Compatibility with other email applications is often not guaranteed. In case of web scanners, which are optimized for scanning website visits by a normal web browser, issues like timeouts or connection resets may occur when accessing Microsoft Exchange Servers via "WebDAV over HTTP" or "Exchange Web Services" (uses HTTP as well).

Should archiving with MailStore Server be affected by one of the above problems and is there an antivirus software with activated email or web scanner installed on the the computer that executes the archiving profile, try to disable these component first. Should that not resolve the issue, it may be necessary to temporarily uninstall the antivirus software. We recommend to contact the vendor of the antivirus software, if the problem can be resolved by either disabling or uninstalling.

Heuristic & Behavioral Analysis

MailStore Server uses multiple methods to access local applications, email servers or other resources for archiving. All these combined into one application seems to cause antivirus software to classify MailStore Server's executables or even the download link as a threat.

In that case please try to verify that classification with an online virus scanner like VirusTotal and contact the vendor of your anti virus software if applicable.