Re: TB's EXE changed every time?

2004-10-24 Thread Dierk Haasis
Hello Jurgen!

On Sunday, October 24, 2004 at 8:35:28 AM you wrote:

 This thread is already a little bit old, but today I got the same
 thing, upon starting TB! I got the message from Panda that TB! has
 been changed and if I want to allow connection to internet. Haven't
 had that in the few days before, since I installed Panda (maybe 2
 weeks ago).

Points more and more to The Bat! With F-Secure it happens every time I
start TB after a complete start of XP, never during a session even
after hibernating.

After FS told me this behaviour is unknown I wrote them back that it
is reproducible. I hope they have a look into since this definitely is
way over my head.

Still, RL should have a look into the issue, too, as we now have three
firewalls doing this: Your Panda, someone reported McAfee 6 and my
brand new F-Secure Internet Security 2005.




-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

Military Intelligence is a contradiction in terms.





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-24 Thread Chris
Hello Dierk,

Sunday, October 24, 2004, 3:01:47 AM, you wrote (at least in part):

 upon starting TB! I got the message from Panda that TB! has
 been changed
I use DiamondCS Process Guard 3 public beta 2 which detects changes in
.exe files but has not detected them with the bat.  I also use Jetico
Personal Firewall which detects changes as well but same thing has not
detected any changes with The Bat!  They have detected changes with
The Bat! of course when I upgrade though.


-- 
Thanks,

Chris

Using The Bat! v3.0.2.1 on Windows XP 5.1 Build  2600
Service Pack 1



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-21 Thread Marcus Ohlström

On Friday, October 22, 2004, 04:12, Peter Ouwehand wrote:

MO No, it's because the '' is early enough in the line to make TB!
MO believe it is indication this is an answer. To change
MO sensitiveness, lower the value in Options | Preferences |
MO Viewer/Editor | Editor preferences | Quote name limit.

 Also when it's prefixed by some other character?

Yes, see above. In you reply, '' was prefixed by MO. TB! correctly
treated this as an answer and added a extra '' when opening this edit
window. I have Quote name limit set to five, so if we continue this
thread a few more levels, my TB! won't understand what's an answer and
what's not and will start messing up my replies.

-- 
Regards,
Marcus Ohlström

Using The Bat! v3.0.1.33 on Windows 2000 5.0 Build 2195 Service Pack 4
PGP Public Key at http://www.canit.se/~marcus/pgp.asc






 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Marcus Ohlström

On Tuesday, October 19, 2004, 07:42, Dierk Haasis wrote:

 What I found today is that it is not *every* time I start TB, but only
 after I had shut down Windows. Next time I start Windows and then XP
 F-Secure's fire Wall asks me to allow TB to connect to the Internet
 (outgoing).

Obviously F-Secure not being able to store the updated hash (again, as
long as you are certain your system is not in fact infected). It
remember the updated hash while running, but doesn't update it's
configuration files. Have a look at the configuration files and make
sure it's not write protected.

And then contact F-Secure support.

-- 
Regards,
Marcus Ohlström

Using The Bat! v3.0.1.33 on Windows 2000 5.0 Build 2195 Service Pack 4
PGP Public Key at http://www.canit.se/~marcus/pgp.asc






 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Klimov Vova
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello!

DH Hello TBBETA Members!

DH   I have a very strange experience with the current TB EXE:

DH   Whenever I start TB, F-Secure's fire wall tells me the program has
DH   been changed since last time and if I want allow it to connect to
DH   the Internet.
Confirmed with McAfee PF 6+





Using The Bat! 3.0.2.1  Professional
on Windows XP (5. 1) Build 2600 Service Pack 2

-BEGIN PGP SIGNATURE-
Version: PGP SDK 3.2.2
Comment: 

iQA/AwUBQXTbywfz7CZ5qak3EQJBpACgxCnqMWPGulhSM47QFMtliMtpKpUAnRaA
0cW3T5RAmR2KnIRsljBl2QzU
=9mvu
-END PGP SIGNATURE-



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Dierk Haasis
Hello Ian!

On Tuesday, October 19, 2004 at 8:12:09 AM you wrote:

 This must be something with the F-Secure firewall because I have
 Norton Personal Firewall and I have only been asked once (the first
 running) to allow access.

I am not sure about this anymore since I've seen someone else posting
the same problem with McAfee.

I contacted F-Secure's support today, who assured me they haven't
heard of any trouble with TB, yet. The former version (2004) had no
problems (as to F-Secure's support).




-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

Anything that can be misunderstood will be. (David G. Myers)





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Dierk Haasis
Hello Marcus!

On Tuesday, October 19, 2004 at 10:00:40 AM you wrote:

 And then contact F-Secure support.

Done. I am currently investigating this further. BTW, waking Windows
from hibernation (the Shift+leftmost button) abd starting the
program also does not give me a warning.





-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

You cannot possibly buy affection; but the wise man is content renting
it ... (Derek Leveret)





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Raymund Thomas Tump
Hi TBBeta,

 Done. I am currently investigating this further. BTW, waking Windows
from hibernation (the Shift+leftmost button) abd starting the
 program also does not give me a warning.

This makes me wondering all the time. From time to time I have
spurious '' characters in the mails. I can't see why Dierk should add a
'' before hibernation.

Same in this mail from Peter [EMAIL PROTECTED]

At the archive on gmane there is no '' befort hibernation, but
hitting F9 it is there as if it was in the original post. So what's
going on here?

-- 
I'm already gone,
Raymund

The Bat! 3.0.1.33 on Windows XP Service Pack 2



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Spurious characters in TB! mails [was Re: TB's EXE changed every time?]

2004-10-19 Thread Mary Bull
Hello Raymund!

On Tuesday, October 19, 2004, 12:16 PM, you wrote:

RTT From time to time I have spurious '' characters in the mails. I
RTT can't see why Dierk should add a ' before hibernation.

Not happening here. No  '  before hibernation. Neither in the View
Folder TBBETA window nor in the View Source (F9) window.

Maybe it's in the language-font choice for your machine? I'm running
the multilingual interface and using American English.

-- 
Best regards,
Mary
The Bat 3.0.2.1 (Professional Edition) on Windows XP 5.1 2600 Service Pack 2




 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Dierk Haasis
Hello Raymund!

On Tuesday, October 19, 2004 at 7:16:04 PM you wrote:

 This makes me wondering all the time. From time to time I have
 spurious '' characters in the mails. I can't see why Dierk should add a
'' before hibernation.

I haven't, it was a server in-between, kind of escaping the lying
carets in that line.




-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

Demokratie entsteht, wenn man nach Freiheit und Gleichheit aller
Bürger strebt, die Zahl der Bürger, nicht aber ihren Charakter
berücksichtigt. (Aristoteles)





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Raymund Thomas Tump
Hi Dierk,

 '' before hibernation.

Why are there two '' now?

 I haven't, it was a server in-between, kind of escaping the lying
 carets in that line.

In the mail from Peter I mentioned in my first post, there is nothing
that I can see that could trigger such an escaping. And which server
should have made the change?

The mail from Mary is a bit weird, too. Instead of '' I see ' and
that's the same in the archive.

-- 
I'm already gone,
Raymund

The Bat! 3.0.1.33 on Windows XP Service Pack 2



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Dierk Haasis
Hello Raymund!

On Tuesday, October 19, 2004 at 7:59:18 PM you wrote:

 '' before hibernation.

 Why are there two '' now?

Because a server, most likely yours, added another one.




-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

Die Trunkenheit vermehrt schön zwei schöne Dinge - Mut und Liebe.
(Jean Paul)





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Peter Palmreuther
Hello Raymund,

On Tuesday, October 19, 2004 at 7:16:04 PM Raymund [RTT] wrote:

from hibernation (the Shift+leftmost button) abd starting the
 program also does not give me a warning.

RTT This makes me wondering all the time. From time to time I have
spurious '' characters in the mails. I can't see why Dierk should add a
'' before hibernation.

Not before 'hibernation'. There's an additional '' in front of
'from'.

RTT At the archive on gmane there is no '' befort hibernation, but
RTT hitting F9 it is there as if it was in the original post. So what's
RTT going on here?

One mail server between list server and your mailbox inserted it to
escape the 'from'.
In a Unix mailbox messages are stored serialized. All in one text
file.

A new message is recognized by a line starting with
'From [EMAIL PROTECTED] Date' (without the ' of course).

As a lexical parse for syntactically completely correct line is much
to expensive mail handling tools often parsed only for 'From' at start
of line. For not confusing this tools and make message handling,
storing and forwarding easier some old style servers escape a line
starting with 'from' in message body by prepending the ''.

HTH  HAND
-- 
Regards
Peter Palmreuther

(The Bat! v3.0.2.1 on Windows XP 5.1 Build 2600 Service Pack 2)

As soon as you pull out the pin, Mister Hand Grenade stops being your
friend.



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-19 Thread Marcus Ohlström

On Tuesday, October 19, 2004, 21:22, Peter Ouwehand wrote:

RTT Why are there two '' now?

 Here, TB added a greater-than sign in between the apostrophes after
 starting a reply to you msg mid:[EMAIL PROTECTED]

 A bug perhaps?

No, it's because the '' is early enough in the line to make TB!
believe it is indication this is an answer. To change sensitiveness,
lower the value in Options | Preferences | Viewer/Editor | Editor
preferences | Quote name limit. This is also the reason I delimit
configuration paths with '|' and not with '-' as I used to (I got the
idea from Marck, but I suppose he is doing it by the same reasons).

-- 
Regards,
Marcus Ohlström

Using The Bat! v3.0.1.33 on Windows 2000 5.0 Build 2195 Service Pack 4
PGP Public Key at http://www.canit.se/~marcus/pgp.asc






 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Charlene Ferrara
Hi Dierk Haasis,

Monday, October 18, 2004 
you let us know -at least in parts- :
 Hello TBBETA Members!

   I have a very strange experience with the current TB EXE:

   Whenever I start TB, F-Secure's fire wall tells me the program has
   been changed since last time and if I want allow it to connect to
   the Internet.

Did you run recently any cleaning program such as PurgatioPro or jv16
powertools?





-- 
kind regards
Charlene Ferrara
mailto:[EMAIL PROTECTED]
:star:






 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Marcus Ohlström

On Monday, October 18, 2004, 20:32, Dierk Haasis wrote:

   Whenever I start TB, F-Secure's fire wall tells me the program has
   been changed since last time and if I want allow it to connect to
   the Internet.

I suppose you acknowledge the change when first launching TB! after
upgrading?

If so, first make sure your TB! exe is not infected with anything. If
it is not, this is probably just F-Secure having problems storing the
new hash for TB!. I've seen it happen with Kerio and that time I was
certain no change had been made (no, it wasn't TB!, but that really
doesn't matter).

-- 
Regards,
Marcus Ohlström

Using The Bat! v3.0.1.33 on Windows 2000 5.0 Build 2195 Service Pack 4
PGP Public Key at http://www.canit.se/~marcus/pgp.asc






 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Peter Palmreuther
Hello Dierk,

On Monday, October 18, 2004 at 8:32:01 PM Dierk [DH] wrote:

DH I have a very strange experience with the current TB EXE:

DH Whenever I start TB, F-Secure's fire wall tells me the program has
DH been changed since last time and if I want allow it to connect to
DH the Internet.

Maybe your F-Secure does not store the new checksum properly?
I know for sure my .exe ain't changed, Kerio only moans once, at first
start after an update.
-- 
Regards
Peter Palmreuther

(The Bat! v3.0.2.1 on Windows XP 5.1 Build 2600 Service Pack 2)

Let a fool hold his tongue and he will pass for a sage.



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Charlene Ferrara
Hi Peter Palmreuther,

Monday, October 18, 2004 
you let us know -at least in parts- :

 Maybe your F-Secure does not store the new checksum properly?
 I know for sure my .exe ain't changed, Kerio only moans once, at first
 start after an update.
That has been the reason here for some strange side-effects some
software showed, and the cause therefor was that I did run a cleaning
tool, which promised to clean up only unused dlls, links leading to
nowhere and so on. After a restore all was fine again. So maybe the
checksum cannot be memorized because of a missing (deleted) part in
Kerio or F-secure.


-- 
kind regards
Charlene Ferrara
mailto:[EMAIL PROTECTED]
:star:






 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Dierk Haasis
Hello Charlene!

On Monday, October 18, 2004 at 8:34:55 PM you wrote:

 Did you run recently any cleaning program such as PurgatioPro or jv16
 powertools?

No.

For a time I wasn't quite sure if I had installed a new EXE, but for a
few days now TB is hasn't been changed by me.





-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

Life is a sexually transmitted disease. (Alexander Veljanov)





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Dierk Haasis
Hello Marcus!

On Monday, October 18, 2004 at 8:37:08 PM you wrote:

 I suppose you acknowledge the change when first launching TB! after
 upgrading?

Yes, and checking Don't ask again for this program.




-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

The ask-first principle: to find out whether an action is right or
wrong, ask first. (Michael Shermer)





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Dierk Haasis
Hello Peter!

On Monday, October 18, 2004 at 8:37:47 PM you wrote:

 Maybe your F-Secure does not store the new checksum properly?
 I know for sure my .exe ain't changed, Kerio only moans once, at first
 start after an update.

Must be an F-Secure problem. I'll dig deeper on that side.



-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

Why is the man who invests all your hard earned money called a
broker?





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Peter Meyns
Hi Dierk,

on Mon, 18 Oct 2004 20:32:01 +0200GMT, you wrote:

DH   I have a very strange experience with the current TB EXE:

DH   Whenever I start TB, F-Secure's fire wall tells me the program has
DH   been changed since last time and if I want allow it to connect to
DH   the Internet.

I use Kerio PF, and it only asks for confirmation when I really
changed the exe.

-- 
Cheers
Peter

The Bat! v3.0.2.1 on Win2K, SP4, 5, 0, build 2195,
AMD Athlon 2200+ at 1800MHz, 512 MB RAM

Winamp currently playing: Chumbawamba - Tubthumping (Frequence3 --
www.Frequence3.org - Une Rafale De Tubes - The French Webradio live
from Paris France)

pgpDlDZkkrGJ3.pgp
Description: PGP signature

 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/

Re: TB's EXE changed every time?

2004-10-18 Thread Peter Asenbauer
Hello Dierk,

Monday, October 18, 2004, 8:32:01 PM, you wrote:

   Whenever I start TB, F-Secure's fire wall tells me the program has
   been changed since last time and if I want allow it to connect to
   the Internet.

Just an idea: every time I updated BayesIt plugin (and consequently
closed and re-started TB) I got that question as well. But did you
change one of your plugins *every* time you started TB? Does not
sound too likely IMO.

-- 
Best regards,
Peter



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: TB's EXE changed every time?

2004-10-18 Thread Dierk Haasis
Hello Peter!

On Monday, October 18, 2004 at 10:49:15 PM you wrote:

 But did you change one of your plugins *every* time you started TB?

No.

What I found today is that it is not *every* time I start TB, but only
after I had shut down Windows. Next time I start Windows and then XP
F-Secure's fire Wall asks me to allow TB to connect to the Internet
(outgoing).




-- 
Dierk Haasis
:Dierk: Copy 'n' Concept

The Bat 3.0.2.1 on Windows XP 5.1 2600 Service Pack 2

Chat info for ICQ, AIM, MSN, Yahoo, Jabber upon request

Buss’s Third Law of Human Mating: For every mating adaptation in one
sex, there exists at least one co-evolved adaptation in the other sex
designed to manipulate and exploit it. (David Buss)





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/