Your browser is obsolete!

The page may not load correctly.

  • add to favourites
    Add to Bookmarks

Who issues the spam verdict

Read: 1384 Comments: 15 Rating: 42

Dr.Web users are well aware that Dr.Web Security Space incorporates an anti-spam. The most curious ones also know that the anti-spam is part of the mail monitor SpIDer Mail (so it is namely the mail monitor that contains the anti-spam settings).

Historical Background

In 2002 Doctor Web was the first to implement a mail monitor for Windows that worked independently of the mail client applications installed in a system. Later this became an anti-virus industry standard.

But few people probably realise that the anti-spam doesn't decide if a message is spam.

This is somewhat unexpected, right?

The anti-spam adds spam weight values to message headers. The module that brought the anti-spam into action decides whether or not a message is spam.

#drweb

Why does it work this way?

To determine if a message is spam, Dr.Web uses several routines. The results are added together using a special formula.

But there is a small problem. To bypass spam filters, spammers are constantly modifying their messages. A message is scanned for viruses and spam while a mail client is retrieving it. However, information that will enable the anti-virus to determine that another bulk of emails has been dispatched by spammers will only arrive with the next anti-virus update.

Alas, the Dr.Web Anti-virus that protects PCs can't rescan previously received emails (unlike Dr.Web products for mail servers).

An anti-virus scanner can examine databases containing email messages (repositories), but it can neither cure infections nor change an email’s status (spam/not spam) because many email databases do not feature an open format.

Is there a way around that? Sure, if you retrieve emails via IMAP. But that’s a topic for another issue. #anti-spam #Dr.Web_settings

Dr.Web recommends

Advanced users can use header information about a message’s weight to fine-tune email filtering in their mail clients

Let's see how this can be done in Outlook 2007.

  1. In Microsoft Outlook go to Tools and open the tab Rules and Alerts.

    #drweb

  2. Select the E-mail rules pane, and click New Rule.

    #drweb

  3. Select Start from a blank rule and enable the Check messages when they arrive option. After that, press Next.

    #drweb

  4. In the conditions list, choose “with specific words in the message header”.

    #drweb

  5. In the condition window, choose “specific words”. In the newly opened window, enter “X-DrWeb-SpamState: YES” without the quotation marks. Press Add, OK, and then press Next.

    #drweb

  6. Check the Move it to specified folder checkbox, and select the folder you want to place spam into by clicking on the specified folder option. If you would prefer to store spam in a new directory, press Create to create the directory. Press Next and then click Finish.

    #drweb

To finish configuring the rules, close the rules window.

Note that rules can be far more complex.

Rate this issue and receive Dr.Weblings! (1 vote = 1 Dr.Webling)

Sign in and get 10 Dr.Weblings for sharing the link to this issue via social media.

[Twitter]

Unfortunately, due to Facebook's technical limitations, Dr.Weblings cannot be awarded. However, you can share this link with your friends for free.

Tell us what you think

Leave your comment on the day of publication and get 10 Dr.Weblings, or get 1 Dr.Webling for a comment posted any other day. Comments are published automatically and are reviewed by a moderator. Rules for leaving comments about Doctor Web news items.

To leave a comment, you need to log in under your Doctor Web site account. If you don't have an account yet, you can create one.

Comments