Hello Yuki,

On Sun, 8 Feb 2004 08:48:58 +0900 GMT (08/02/2004, 06:48 +0700 GMT),
Yuki Taga wrote:

> Here is what I did:

> 1) Disabled Symantec (this is not NAV, but Symantec Corporate).

> 2) Did the download.

> 3) Two infected messages, rather obvious attempts, came into by Bat
> Beta folder.

> 4) I simply deleted them.  I know enough not to open them of course.

> But, amazingly to me . . . when I closed and re-opened TB, I had lost
> every message in my Inbox, and every message in my Bat Beta folder.
> All gone.  Poof.

No, not gone. Your AV software has quarantined your whol message.tbb
file, because you forgot to compress the folder before you re-enabled
the AV software. The virus was still there; the "delete" action only
marks it as deleted but you should know TB well enough by now to know
that it doesn't get deleted from the base until you compress.

Get the .tbb file back from the quarantine while TB is closed. disable
AV software, start TB and go into that folder (all messages are
there!), compress the folder, and *now* fire your AV software back up.

No, this has nothing to do with nannying, as the AV software is able
to detect MIME-encoded viruses, which makes it capable of detecting
such a  virus upon download. If you disable it during download, and
then enable it again, and you have real-time scan enabled, every file
will be scanned upon access. So, we you go into the TB folder, the
file will be opened and utomatically scanned. And, of course,
quarantined.

Over here, my AV software does not scan while downloading, and it does
not scan upon file access either. I don't run any software that
automatically opens files. Suspicious files (that includes those
ending in .doc) will be scanned manually before opening - it is a
small work, and much less annoying that what you have just
experienced. IMHO.

-- 

Cheers,
Thomas.

Moderator der deutschen The Bat! Beginner Liste.

Who was the first person to look at a cow and say," I think I'll
squeeze these dangly things here, and drink whatever comes out"?

Message reply created with The Bat! 2.03 Beta/51
under Chinese Windows 98 4.10 Build 2222 A 
using a Pentium P4 1.7 GHz, 256MB RAM



________________________________________________________
 Current beta is 2.03 Beta/59 | "Using TBBETA" information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/

Reply via email to