So, I went from one anti-virus program which was ridiculously slow and caused my system to crash, to one which deletes information out of my inbox and corrupts my email. Is this really any better?
First, PC Tools Spyware Doctor with Antivirus should be avoided by anyone not running absolutely current hardware. I installed it a few months back and started experience periods of extremely system slowness and sporadic lock ups of the entire system. I’d also installed some new memory at the same time, so I wasn’t really sure of the cause at first. Since I’ve un-installed it two days ago, I’ve seen no crashes. Not conclusive yet of course, but looks like PC Tools not the memory was at fault. The system as a whole seems much more responsive as well. I will not be buying a PC Tools product again in the near future. (IE, several years.)
My next pick was Norton Internet Security 2010. I’ve had a love-hate relationship with them over the years. They make a good product, but they suffer from bloat and usability issues to the point where its unusable. Based off reviews from PcMag, it looked like they’d resolved that in the most recent version or two. Turns out, that’s right. The software runs quickly, is easy to interact with, and has not caused any performance problems for me.
HOWEVER, Norton did the unthinkable. Without asking me, giving me a chance to see what was happening, or otherwise tell it to stop what it was f****ing doing, it deleted several infected emails out of the compressed inbox file of Thunderbird. Now, to it’s credit, the viruses were real. To it’s extreme discredit, there were also in my junk and trash folders and would have been deleted on shut down. Since Thunderbird - reasonably - assumes that no one is going to randomly removing things from its files, this corrupted my entire inbox and made much of my mail completely unaccessible. Even worse, it did the same thing to my backup files which had not been moved off the machine yet. (They had been stored as zip files.)
I’m still trying to figure out how to fix this and will update once I figure it out. I’m also looking for ways to disable Norton’s “delete high criticality ‘threats’” feature as well. I can’t seem to do it through the obvious places. I understand why they added that, but it was an extremely poorly thought out choice for power users.
[Update: Thunderbird Fixed 11:03pm]
I’ve been able to restore all my ‘lost’ emails in Thunderbird. It looks like Norton deleted the contents of the actual mail files, but did not update the index (MSF) files. By forcing Thunderbird to rebuild all of it’s index files, I have everything back the way it was before. I found two ways to do this:
- In Thunderbird, Right click Properties and click Repair Folder for each folder. In my case, this should have been all I need, but since I wasn’t 100% sure Norton didn’t screw up other folders, I went to step two.
- Delete all of the .MSF files from your profile directory. As described by Mozilla, these files are index only files which can be rebuilt - if slowly - by Thunderbird the next time you view that folder. I found the command “del /S *.msf” very helpful to run from the command line in my profile directory. I have a fairly deep nesting structure in my folders, so going though one by one would have been a royal pain.
I’m also going to compress my folders - AFTER backing up and the steps above - to remove a lot of the deleted messages Thunderbird still stores.
[Update 2, Norton is a Virus, 11:28]
After some digging around on the web and Norton’s support forum, it really looks like there is no way to remove Norton’s auto-deletion of “high” severity threats. There is no option in the UI (even disabling the SONAR features does not do it). There does not even appear to be a registry hack.
I consider this a fatal flaw in the software. I strongly recommend anyone reading this to go buy something else instead. Given my recent sampling of current anti-virus, I am strongly tempted to go back to the Corporate version of McAfee I’ve been using the last few years. I wonder if they sell single license copies of their commercial products?
Philosophical question for you
What’s the difference between an anti-virus program that deletes your files and a rootkit that defends itself against other infections?
Joking answer: How much you paid for it.
Serious answer: Not sure. If I think of one, I’ll tell you.