Feeds

Symantec fights auto-responder menace

No tsunamis swamping spoofed addys

  • alert
  • submit to reddit

Secure remote control for conventional and virtual desktops

Virus notification alerts will hopefully become less of a nuisance after modifications to Symantec's mail server security products announced this week.

Mass mailing viruses frequently spoof the sender's address in infected emails sent out from pox-ridden PCs. This forged email address is often randomly plucked off the infected computer by a virus.

Many gateway applications that scan email attachments for viral content email auto-responds when a virus is found. If the 'Sender' name has been forged, the auto-reply will be sent to an innocent party, causing unnecessary confusion and stress. A false accusation may even harm an organisation's relationship with clients and partners. Bounced messages from auto-responders are feeding a flood of useless and malicious messages that threatens to swamp legitimate emails for many users, include many whose Linux or Apple Mac machine are immune to Windows malware.

Symantec has turned off this auto-responder feature by default for the last two years but systems admins insist on turning it back on, according to Chris Miller, a Symantec mail security product manager. In response the company has come up with a more sophisticated approach, called Mass Mailer Cleanup, with the latest version of its gateway product Symantec Mail Security for SMTP 4.0. Miller explained this technology was able to differentiate between mass mailers and regular viruses, only sending notifications for the latter. Mass Mailer Cleanup also deletes the entire content of messages generated by mass mailer viruses so that internal users receive fewer useless messages. The technology will feature in other Symantec AV product for Lotus Notes and Microsoft Exchange, he added.

Symantec hopes the AV industry as a whole will modify its approach to auto-responder 'virus-generated spam', which has historically been treated as something of a marketing tool.

In years past notifying people they may have sent a virus performed a useful function that has been eroded by the mass-mailer auto-responder problem. Symantec move to minimise this problem is welcome even if is overdue, we could have really done with those auto-responder messages from Symantec, NAI and Sophos gateways during the MyDoom epidemic, for example. ®

Related stories

Auto-responders magnify Sobig problem
The illicit trade in compromised PCs
Anti-spam tsunami hits SMEs

Beginner's guide to SSL certificates

More from The Register

next story
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Go beyond APM with real-time IT operations analytics
How IT operations teams can harness the wealth of wire data already flowing through their environment for real-time operational intelligence.
The total economic impact of Druva inSync
Examining the ROI enterprises may realize by implementing inSync, as they look to improve backup and recovery of endpoint data in a cost-effective manner.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.