282898 - One out of my 6 mail inboxes crashes when I receive a W32.Netsky.P@mm!enc

Status: RESOLVED DUPLICATE of bug 116443

(MailNews Core :: Backend, defect)

Description

[bas]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041217
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041217

Well, I never had this before and it is kind of odd. I have several email
address, to be exact six. Now the problem that I have is that
"[e-mail]" is the inbox that is causing the trouble.

Mind you it has always been working correctly. However recently I once came
online and as soon as I opened the mailtool my norton antivirus popped up and
said there was a W32.Netsky.P@mm!enc in my mail.bruinekool.com inbox folder. It
there for automatically quarentines it and the email becomes innaccessable. If I
leave the file quarentined, mozilla will stick to an invinite load loop if I try
to check my [e-mail] email.

If I remove the inbox file from the quarentine, mozilla regenerates the file on
the next start up and my mailbox is gone. I have webmail for the same account so
I can take the emails back in, but it is just annoying to have this reoccur
every 2 days.

It is the 3rd time it has happened upto now, I am quite certain it has to do
with W32.Netsky.P@mm!enc that comes with the email, since norton quarentines my
inbox as soon as I receive an email that contains this virus I have no way of
checking out the contents of the email.

What makes it more odd is the fact that normally a virus wont be detected unless
the attachement is opened in which it resides, so I figure it might be some form
of a bug exploit to make norton think there is a virus by mimicing the signs of
the virus.

I have reinstalled mozilla suite as well to see if this possible corrected the
problem with the latest version, however it didnt. 

So I was wondering if you had a solution for this?

Yours Sincerly,
Bas Bruinekool

Reproducible: Always

Steps to Reproduce:
1.Open my mail
2.Receive emails from all inboxes
3.If an email is received with W32.Netsky.P@mm!enc norton quarentines the inbox
and I need to reset the inbox by deleting the quarentine (hence losing all mail
in the inbox)

Actual Results:  
Mozilla regenerates the inbox file, and the problem starts over again when I
receive a W32.Netsky.P@mm!enc in an email. (Although I am not sure wether there
is a W32.Netsky.P@mm!enc in the email or if it just some bug exploit that mimics
the W32.Netsky.P@mm!enc)

Expected Results:  
Not entirely sure on this, but if this is a bugexploit that makes some form of
code in the email (since if the virus was an attachement norton wouldnt filter
it out immediatly) that makes norton think there is a virus in the inbox folder
of one of my emails, that would mean the software needs to be fixed code wise to
not allow the exploit. 

If it really is the W32.Netsky.P@mm!enc then I wonder why or how it can be
displayed in such that it is opened on email opening rather than attachement
opening.

Comment 1

[Magnus Melin [:mkmelin]]

Sounds like a dupe of bug 116443. 

Comment 2

[Hermann Schwab]

Bug 116443 Deleted inbox after receiving virus infected mail (McAfee, Norton,
AntiVir)

start reading https://bugzilla.mozilla.org/show_bug.cgi?id=116443#c164

the bug is worked on in the trunk, i.e. the comming 1.8b or current trunk
nightlies. If you want to switch to 1.8b, you can test that preference specified
there.

*** This bug has been marked as a duplicate of 116443 ***