Hi Marck,
On Thu, 21 Jun 2001 02:46:15 +0100GMT (21/06/2001, 09:46 +0800GMT),
Marck D Pearlstone wrote:
JR>> The following was logged by PC-Cillin Anti-Virus program on my
JR>> machine:
JR>> 18:50:42,C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\bat157.tmp,PE_Magistr.A,Unable to
clean. Infected file was quarantined.,Administrator,Real-time Scan
I had exactly the same today (again).
MDP> 1) You're safe. This virus has to be executed to infect you. Saving it
MDP> to disk won't hurt.
PC-Cillin won't allow to save it. ;-)
MDP> 2) You may be in a loop. You have been sent the virus. TB is receiving
MDP> the infected file.
No, it is not a loop. If you have "automatic check every xxx minutes"
set, then you will get this message each time TB tries to download the
infected message. In my case, every 5 minutes.
MDP> 4) This may force TB to try and get the message again and fail to
MDP> complete the download each time.
Exactly.
In order to stop this error message from occurring and the PC-Cillin
warning to pop up, you need to delete the message direclty on the
server. You can do it with TB's own message despatcher (untick
"receive", but tick "delete"), or pine, or the web interface if your
provider offers one. The problem is that neither PC-Cillin nor TB tell
you which account this infected file is on, and you have to check your
account logs for this error message:
!21/06/2001, 10:37:31: FETCH - [Inbox] could not store message (file name -
C:\WINDOWS\TEMP\bat5122.TMP)
You still don't know which email it is, so if there are many on the
server, you will have to go looking.
Of course, you could also disable PC-Cillin and download the infected
file. As long as you don't run it, you are safe.
--
Cheers,
Thomas.
Moderator der deutschen The Bat! Beginner Liste. Anmeldung unter:
[EMAIL PROTECTED]
Message reply created with The Bat! 1.53d
under Chinese Windows 98 4.10 Build 1998
on a Pentium II/350 MHz.
--
______________________________________________________
Archives : <http://tbudl.thebat.dutaint.com>
Moderators : <mailto:[EMAIL PROTECTED]>
TBTech List: <mailto:[EMAIL PROTECTED]>
Unsubscribe: <mailto:[EMAIL PROTECTED]>
