#1376 new
Christopher Knight

MM crashes when antivirus program detects trojan in downloading mail

Reported by Christopher Knight | January 10th, 2016 @ 07:08 PM

I have just started the trial of MM and having set up a Google account, MM proceeded to download mail on the server.At some point it is trying to download a message with a Trojan in it (as reported by the antivirus program I am using - Avira), at which point a warning from Avira pops up and MM crashes.

I delete the quarantined file through Avira and restart MM. However, the cycle repeats as MM tries to re-download the same message.

There is not enough information in the filename reported by Avira to enable me to find the message on Gmail, using the web interface. The filename reported is

.......@imap.gmai|.com/[Google Mail].mailbox/Sent Mai|.mai|box/Messages/11141.emlh TR/Script.481282 trojan

Naturally, I am reluctant to turn off Avira just to download a potential Trojan!

Is there a way I can tell MM to skip past or if need be, to just stop downloading historical gmail messages?

Comments and changes to this ticket

  • benny

    benny January 10th, 2016 @ 08:22 PM

    It's a tricky problem. Avira simply removes a file which MailMate saves to disk and MailMate naturally sees this as a problem (MailMate doesn't know why it disappears). If MailMate is naive then it would simply detect the missing message and refetch it, but this would turn into an infinite loop. I've also attempted/considered other ways to handle it, but I haven't yet found a good solution.

    In this particular case, it appears that the problem is an .emlh file. This is strange, because this means that MailMate has only fetched the headers of the email and I've never heard about a trojan being able to hide in the headers of an email message...

    I'm afraid the best workaround is to locate and delete the email server-side. The headers (in the .emlh file) should provide enough information to do that).

  • Christoph Hipp

    Christoph Hipp May 11th, 2016 @ 02:19 PM

    benny, did I get you logic right: Better crash the application than doing SOMETHING useful?
    What MailMate CURRENTLY does is actually creating an infinite loop. An infinite loop of crashing restarts in case of a virus disinfection.

    I like MailMate very much but this BUG hinders me using it productively. It is simply not an option, to stop the Virus Scan, just because the Mail Client is completely unable to cope with the situation.

    As a MailMate user, I don't want to be forced to turn off my Virus Scanner be able to work with my MailMate - in no situation.

    Suggestion...

    If a file is unexpectedly deleted while synchronizing an account, present the user a list of options and ask what what to do...

    a) ignore (and don't crash)
    b) delete message
    c) download message again

    In the application settings you should also be able to define the default behavior - option a makes most sense for me.

    Please fix this bug.

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

Mac OS X email client.

Shared Ticket Bins

People watching this ticket

Attachments

Pages