Re: Regarding AV Plugins for TB!

2002-10-19 Thread Simon
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

'Lo Sudip,

On Saturday, October 19, 2002, 3:12:03 AM, you authored this:

SP On Friday, October 18, 2002 17:46 your local time, (22:31 my local
SP time), you wrote:

SP Don't   quote   me  on  this,  but  I  don't  think  you  can  use  them
SP simultaneously.  Besides,  why would you want to do that? It's more of a
SP redundancy than extra protection.

Just  for  the record, I have always used multiple virus scanners on my home
LAN,  well  I  say  always, but what I mean really is ever since moving from
WFWG  3.11  to  the 32bit (cough) operating systems all those years back. If
you  don't run real-time virus scanning tasks in the background/as services,
which  I  don't because of the performance overhead and because it is mostly
overkill,  then  having  multiple  scanners  is pretty straight forward: you
simply  disable  all real-time protection that the software provides and use
the on-demand part of the software. I've not encountered any problems, ever,
using  scanners  like this, and in fact I have at one time had four scanners
installed  at  the  same  time  whilst testing them for effectiveness. Virus
scanners  only  need  exclusivity  when  they are running real time / system
tasks as they often will cause conflicts when they run concurrently.

SP I use AVG plug-in and I *see* the loader screen appear briefly - at
SP times for a longer time but that could be attributed to only 256MB RAM
SP on my XP pro

It  could  be  that  I am missing the AVG loading as it is too quick in that
case.  Maybe the Kapersky plug is slow to load so that's why I see it at not
AVG :)


- --
Slán,

 Simon  theycallmesimon.co.uk

___
Faffing about with TB! v1.61 on W2K SP3

PGP Key: http://pgp.netbanger.com/index.shtml

-BEGIN PGP SIGNATURE-
Comment: Privacy is freedom. Protect your privacy with PGP!
Comment: KeyID: 0x5C7E8966
Comment: Fingerprint: 851C F927 0296 FF1C 70A2  474F CB6E 6FFE 5C7E 8966

iQA/AwUBPbE8P8tub/5cfolmEQKAvgCfR4DSDN8qHXQECE6Yb6eTarrqaYoAoO8p
vc0PNrzKbsxknXF0vXFKeVa2
=abVy
-END PGP SIGNATURE-




Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Re: Regarding AV Plugins for TB!

2002-10-19 Thread Simon
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

'Lo Chris,

On Saturday, October 19, 2002, 1:53:34 AM, you authored this:

CW I  believe  you  can, as I was for a while, but it was a bit of overkill
CW with  potential  conflicts,  which  isn't  nice as I experienced earlier
CW today! :-( Killed my PC until I managed to restart (removing the battery
CW from  my  laptop)  into  safe  mode.  Then did a system restore, removed
CW unwanted  virus scanners and now running like a dream again. DrWeb seems
CW very  nice  and  also checks compressed files before execution, which is
CW currently being discussed, but something I was personally looking for.

I've  never had conflicts on my system with multiple scanners, and that part
isn't  really  a  worry  to  me. I was just trying to figure out whether TB!
would/would  attempt  to  run  all  plugins  in the list simultaneously, and
therefore  find  out  whether  all scanners vie for priority, or whether TB!
gives priority to the topmost plugin and ignores or queues the rest.

CW All I see is that I've a plug-in but it doesn't say what program.

It  could  be  then that the Kapersky plugin is just verbose and the AVG one
isn't :)

Slán,

 Simon  theycallmesimon.co.uk

___
Faffing about with TB! v1.61 on W2K SP3

PGP Key: http://pgp.netbanger.com/index.shtml

-BEGIN PGP SIGNATURE-
Comment: Privacy is freedom. Protect your privacy with PGP!
Comment: KeyID: 0x5C7E8966
Comment: Fingerprint: 851C F927 0296 FF1C 70A2  474F CB6E 6FFE 5C7E 8966

iQA/AwUBPbE+x8tub/5cfolmEQK3hgCbBGuYM8ZP9A0g7Ji2g1yBnT6uJBMAoKM4
6OSBT/ukH6jvRB4m7pMD0WLb
=f+Xi
-END PGP SIGNATURE-




Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Re: Regarding AV Plugins for TB!

2002-10-19 Thread Sudip Pokhrel
Hi Simon,

On Saturday, October 19, 2002 12:04 your local time, (16:49 my local
time), you wrote:

 If you don't run real-time virus scanning tasks in the background/as
 services, which I don't because of the performance overhead and
 because it is mostly overkill, then having multiple scanners is
 pretty straight forward:

Yes. I missed this point.

I don't use real-time scanning either, but never considered having
multiple scanners. This is probably because of my own threat
assessment.

-- 
be well,
Sudip Pokhrel |/\
PM: [EMAIL PROTECTED] |\ / ASCII Ribbon Campaign
PGP Key ID: 0xD93F5185| X  Against HTML E-mail !
http://pgpkeys.mit.edu|/ \
___
Hollywood's Law #24: You're very likely to survive any battle in any
war unless you make the mistake of showing someone a picture of your
sweetheart back home
___
TB! v1.61 on XP Pro|
P4-1.6Ghz 256MB RAM|



Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Re: Regarding AV Plugins for TB!

2002-10-19 Thread Simon
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

'Lo Leif,

On Saturday, October 19, 2002, 4:16:22 AM, you authored this:

LG There have been numerous instances where one scanner detected a new
LG virus where the others didn't depending on which company put the
LG fingerprint into their signature files first.

This  is  also  my experience. It is also one of the reasons I stopped using
McAfee  as  it  used to fail to discover viruses, especially those that were
doubled  archived  (I  haven't  used McAfee for ages so I would suspect that
isn't  a  problem  now)  . An infected rar inside a zip would slip by McAfee
unnoticed. I also used Trend Micro's scanner for ages and it managed to pick
up on infected files more often than Norton and McAfee would.

LG I wouldn't recommend running multiple virus scanners simultaneously on
LG a single machine, but cross scanning on a network has proven most
LG valuable to me. Especially since most of the people who read my
LG newsletter have my editor address in their addressbook, which means
LG any virus/worm which exploits Lookout / Lookout Express will send me
LG an infected e-mail. I literally get *hundreds* of infected e-mail per
LG month. When Klez first hit the wild, I got over 240 infected e-mail in
LG two weeks. The Bat faithfully kept me nice and safe, and the virus
LG scanners quarantined all the bad stuff regardless of which machine
LG they were on.

My  experiences  have  proven  to  me  that using more than one prophylactic
improves  the  odds of discovery. I always scan any file that I receive with
each  installed  scanner  and  then  run  a  separate  trojan  scanner on it
afterwards.

To  date,  my systems have been stable with multiple scanners installed (but
run  manually),  remained  clean, and infected files have never got past the
detection stage, or TB for that matter! Most of the infected files I get are
via  e-mail  and so end up in the account's attachments folder and never get
beyond there. However, I was manually scanning these folders before now, and
so  liked  the idea of automating the task with the plugins when the feature
was added from 1.60 onward.

Anyhow, I still don't know whether TB! executes each plugin concurrently, or
whether only the topmost plugin gets used :)

- --
Slán,

 Simon  theycallmesimon.co.uk

___
Faffing about with TB! v1.61 on W2K SP3

PGP Key: http://pgp.netbanger.com/index.shtml

-BEGIN PGP SIGNATURE-
Comment: Privacy is freedom. Protect your privacy with PGP!
Comment: KeyID: 0x5C7E8966
Comment: Fingerprint: 851C F927 0296 FF1C 70A2  474F CB6E 6FFE 5C7E 8966

iQA/AwUBPbFDeMtub/5cfolmEQLm6QCdHgdZ1xkEZq8tWREl2sImX8SmCrQAoMRe
i8klCP1meJvE/MKFNc9yKEMm
=mJFR
-END PGP SIGNATURE-




Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Re: Regarding AV Plugins for TB!

2002-10-19 Thread Simon
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

'Lo Allie,

On Saturday, October 19, 2002, 7:06:26 AM, you authored this:

snipsees..you're it

ACM This can be done safely as long as you ensure that they aren't assigned
ACM to  do  the  same  scanning  concurrently.  This  would  negate running
ACM real-time  scanners  for  both at the same time. This would also negate
ACM using  plug-ins  for  both at the same time though theoretically having
ACM one  check  incoming  and  one  check outgoing mail should work but why
ACM would one wish to do it that way.

So  am  I  misunderstanding the functionality of TB!'s plugins then Allie? I
was  imagining  that  they  could  be  used  thusly:  if  a  user  installed
two/multiple  AV  plugins the scanners would run consecutively - on demand -
thereby  providing the advantage of a doublecheck.. if one AV scanner missed
something  then  there would always be the safeguard of a second AV check. I
was  also under the impression that the plugins weren't reliant on real-time
modules being loaded. Rather they functioned in the same way as other on
demand scanners and quit after their task had completed.

The  fact  that  you  are  able  to add more than one AV plugin to the Virus
Checking  Plug-ins  config window led me to believe that the use of mutliple
scanners  was  intended.  If  however  this  isn't the case, and only one AV
package  is  ever going to be loaded to scan the incoming and outgoing mail,
regardless  of  how  many  plugins  exist in the list, then surely a simpler
config  window  would  be  in order, offering only the ability to select one
preferred AV plugin?


- --
Slán,

 Simon  theycallmesimon.co.uk

___
Faffing about with TB! v1.61 on W2K SP3

PGP Key: http://pgp.netbanger.com/index.shtml

-BEGIN PGP SIGNATURE-
Comment: Privacy is freedom. Protect your privacy with PGP!
Comment: KeyID: 0x5C7E8966
Comment: Fingerprint: 851C F927 0296 FF1C 70A2  474F CB6E 6FFE 5C7E 8966

iQA/AwUBPbFeWctub/5cfolmEQKGHgCg1kXeuonptoJyJMSu/vHfl2eSsY4An0Qy
lx7cOnvgB5B1x7jYODkF1Sde
=pYmb
-END PGP SIGNATURE-




Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Re: Regarding AV Plugins for TB!

2002-10-19 Thread Allie C Martin
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

In mid:2210395234.20021019142952;theycallmesimon.co.uk,
Simon [S] wrote:'

S So  am  I  misunderstanding the functionality of TB!'s plugins
S then Allie? I was  imagining  that  they  could  be  used thusly:
S if  a  user  installed two/multiple  AV  plugins the scanners
S would run consecutively - on demand - thereby  providing the
S advantage of a doublecheck.. if one AV scanner missed something
S then  there would always be the safeguard of a second AV check.

There's evidence to show that this may not be a good thing. Chris
Weaven posted earlier about getting this strange popup error when
NOD32's plugin checked incoming attachments. No other NOD32 user who
read his post, had ever experienced it, or knew the source of the
problem.

I continued to help him with the problem off-list and he mentioned
by the way, that he was also using the AVG plug-in at the same time.
This turned out to be the source of his problem.

At the DrWeb plug-in download page they also recommend that you
remove other plug-ins though they didn't explicitly state which
other earlier installed plug-ins.

I'm really not sure if a single check can be smoothly performed by
multiple plug-ins. This would be so only if it is done in series and
not at the same time.

S I was also under the impression that the plugins weren't reliant
S on real-time modules being loaded.

They aren't. I was speaking about the two separately.

S The  fact  that  you  are  able  to add more than one AV plugin
S to the Virus Checking  Plug-ins  config window led me to believe
S that the use of mutliple scanners  was  intended.

You could conceivably use multiple scanners to do different things.
You could have one check incoming mail, another check attachments
while they are being saved or opened and another check outgoing
mail.

Though you may succeed in having two plugins check one area together
it just might create conflicts as it did in Cris' case. Perhaps the
conflict is secondary to buggy behaviour rather than a genuine
conflict that can't be resolved. I really am not sure.

- -- 
Allie C Martin \  TB! v1.62/Beta6  WinXP Pro (SP1)
 List Moderator/   PGP Key - http://pub-key.ac-martin.com
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1-cvs (Win32) - GPGshell v2.60

iD8DBQE9sWUyV8nrYCsHF+IRAmwMAJ4xRivAii2LXLFdKVXG7ReEJx2mAACfS7UI
fv53tFuQYmc+v71fZitHoA4=
=BH24
-END PGP SIGNATURE-



Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Regarding AV Plugins for TB!

2002-10-18 Thread Simon
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

'Lo TB! users,

I'm  returning to the list after a fairly long absence so first off hello :)
Nice to have the TBUL folder filling up quickly again ;) Anyway, here are my
Q.s:

Regarding AV Plugins for TB!:

I am using Kapersky and AVG antivirus softwares for system virus protection,
and now have AV plugins for both antivirus programs installed under The Bat!
The Kapersky plugin is shown as v3.590 and the AVG plugin is shown as v9 AVG
6.0.404.

The question(s)

* Can you use multiple AV plugins/scanners with TB!?

* When  launching  TB!  I  can see a spash/loader screen appear briefly for
Kapersky  but  not  for  AVG.  Does  anyone  know if this is normal? (I only
installed  the  plugin  for  AVG today. I've been manually scanning the mail
folders with AVG up until now)

*  In  TB!'s  virus protection settings, you can order the plugins by moving
them up and down. I have moved the AVG plugin to the topmost slot. Will this
mean that AVG will be used soley to scan email or that both scanners will be
used and AVG will be used before Kapersky?

*  When  manually scanning accounts using Folder/Check for Viruses there are
no  options  to  select  which AV scanner to use for the scanning task. Does
this  mean  that  the all AV scanners will be used to check accounts or only
the topmost plugin under virus protection settings.

Thanks :)

- --
Slán,

 Simon  theycallmesimon.co.uk

___
Faffing about with TB! v1.61 on W2K SP3

PGP Key: http://pgp.netbanger.com/index.shtml

-BEGIN PGP SIGNATURE-
Comment: Privacy is freedom. Protect your privacy with PGP!
Comment: KeyID: 0x5C7E8966
Comment: Fingerprint: 851C F927 0296 FF1C 70A2  474F CB6E 6FFE 5C7E 8966

iQA/AwUBPbA63ctub/5cfolmEQICRgCfamkbI4E2tmOPaSX+qEKVx8YCMUsAn0I+
rlRfc55qLTQ/J/GZHpXYx2HM
=sDkk
-END PGP SIGNATURE-




Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Re: Regarding AV Plugins for TB!

2002-10-18 Thread Mary Bull
I have the AVG plug-in installed. It does flash up a window briefly
for me, saying it's
there, when I launch The Bat!

I went to the Kaspersky website and posted a query. Got a message back
by e-mail saying that Kaspersky advises not to have more than one AV
program installed on a machine, because multiple AV programs can
interfere with proper operation of the AV programs.

I am a Bat newbie, and this is my first post to this list. I don't
know how to make a signature that shows what I am running, so will
just put it here in the text:

Running The Bat! version 1.61 on Windows 95B, on Compaq 4540 with 32
MB of RAM.

Maybe someone else can answer the rest of your questions. I would like
to know the answer to them, also.

Mary

S -BEGIN PGP SIGNED MESSAGE-
S Hash: SHA1

S 'Lo TB! users,

S I'm  returning to the list after a fairly long absence so first off hello :)
S Nice to have the TBUL folder filling up quickly again ;) Anyway, here are my
S Q.s:

S Regarding AV Plugins for TB!:

S I am using Kapersky and AVG antivirus softwares for system virus protection,
S and now have AV plugins for both antivirus programs installed under The Bat!
S The Kapersky plugin is shown as v3.590 and the AVG plugin is shown as v9 AVG
S 6.0.404.

S The question(s)

S * Can you use multiple AV plugins/scanners with TB!?

S * When  launching  TB!  I  can see a spash/loader screen appear briefly for
S Kapersky  but  not  for  AVG.  Does  anyone  know if this is normal? (I only
S installed  the  plugin  for  AVG today. I've been manually scanning the mail
S folders with AVG up until now)

S *  In  TB!'s  virus protection settings, you can order the plugins by moving
S them up and down. I have moved the AVG plugin to the topmost slot. Will this
S mean that AVG will be used soley to scan email or that both scanners will be
S used and AVG will be used before Kapersky?

S *  When  manually scanning accounts using Folder/Check for Viruses there are
S no  options  to  select  which AV scanner to use for the scanning task. Does
S this  mean  that  the all AV scanners will be used to check accounts or only
S the topmost plugin under virus protection settings.

S Thanks :)

S - --
S Slán,

S  Simon  theycallmesimon.co.uk

S ___
S Faffing about with TB! v1.61 on W2K SP3

S PGP Key: http://pgp.netbanger.com/index.shtml

S -BEGIN PGP SIGNATURE-
S Comment: Privacy is freedom. Protect your privacy with PGP!
S Comment: KeyID: 0x5C7E8966
S Comment: Fingerprint: 851C F927 0296 FF1C 70A2  474F CB6E 6FFE 5C7E 8966

S iQA/AwUBPbA63ctub/5cfolmEQICRgCfamkbI4E2tmOPaSX+qEKVx8YCMUsAn0I+
S rlRfc55qLTQ/J/GZHpXYx2HM
S =sDkk
S -END PGP SIGNATURE-



S 
S Current version is 1.61 | Using TBUDL information:
S http://www.silverstones.com/thebat/TBUDLInfo.html



Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Re: Regarding AV Plugins for TB!

2002-10-18 Thread Chris Weaven
Hi Simon,

On Friday, October 18, 2002 17:46 your local time, which was 09:46 my
local time, Simon Simon wrote;

 Regarding AV Plugins for TB!:

 * Can you use multiple AV plugins/scanners with TB!?

I believe you can, as I was for a while, but it was a bit of overkill
with potential conflicts, which isn't nice as I experienced earlier
today! :-( Killed my PC until I managed to restart (removing the battery
from my laptop) into safe mode. Then did a system restore, removed
unwanted virus scanners and now running like a dream again. DrWeb seems
very nice and also checks compressed files before execution, which is
currently being discussed, but something I was personally looking for.

 * When  launching  TB!  I  can see a spash/loader screen appear briefly for
 Kapersky  but  not  for  AVG.  Does  anyone  know if this is normal? (I only
 installed  the  plugin  for  AVG today. I've been manually scanning the mail
 folders with AVG up until now)

All I see is that I've a plug-in but it doesn't say what program.

I'm running DrWeb with the plug-in after using both AVG and NOD32.

 *  In  TB!'s  virus protection settings, you can order the plugins by moving
 them up and down. I have moved the AVG plugin to the topmost slot. Will this
 mean that AVG will be used soley to scan email or that both scanners will be
 used and AVG will be used before Kapersky?

Sorry, can't help on that one, but would've thought both would still
scan, with AVG taking pole position :-)

 *  When  manually scanning accounts using Folder/Check for Viruses there are
 no  options  to  select  which AV scanner to use for the scanning task. Does
 this  mean  that  the all AV scanners will be used to check accounts or only
 the topmost plugin under virus protection settings.

Good question.

Not sure how much help that was, but I gave it a shot.

Chris.

-- 
E-Mail - [EMAIL PROTECTED]
Created Using The Bat! V1.61 and Virus Checked by DrWeb.



Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html



Re: Regarding AV Plugins for TB!

2002-10-18 Thread Marck D Pearlstone
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Mary,

18-Oct-2002, 19:40 -0500 (01:40 UK time) Mary Bull [MB] in
mid:16644228048.20021018194056;premiernet.net said:

MB I am a Bat newbie, and this is my first post to this list.

 ... snip

Welcome to the list and sorry to do this to a list newcomer, but it
has to be said 

S 
S Current version is 1.61 | Using TBUDL information:
S http://www.silverstones.com/thebat/TBUDLInfo.html

moderator
You're using the top posting reply format. It is called top
posting because you let the quotes appear at the bottom and type
your reply at the top.

I personally loathe top-posting. It is a hangover from days when
people didn't say much in email. The worst thing about it is that it
forces people to scroll down and then back up to your response to
find out what you're talking about.

Please don't reply like that on this list. I also encourage you to
wean yourself off it in your private correspondence too out of
consideration to those who have to read your messages, but that's
your choice. It only ever works when you don't have much to say and
can trim the original text to tighter context so that the whole
message can be read in one.

As a result of top posting, your message includes all signatures and
previous list footers of the message you are replying to - another
no-no and this one is against the list rules. Please trim your replies.
/moderator

- --
Cheers -- .\\arck D Pearlstone -- List moderator
TB! v1.62/Beta6 on Windows 2000 5.0.2195 Service Pack 2
'
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0-nr2 (Windows 2000)

iD8DBQE9sKx8OeQkq5KdzaARAqksAKD7PK2TsTFHgunCaJNUpTxJdFU8YwCg23R4
1ju+4yzTZdsPbWQw7OT73rM=
=OcPo
-END PGP SIGNATURE-




Current version is 1.61 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html