Hello Thomas,

Sunday, June 13, 2004, 12:35:20 AM, you wrote:

I wrote: On Sat, 12 Jun 2004 23:48:46

a>> eTrust EZ Antivirus real-time protection has found that
a>> C:\DOCUME~1\AVRAM\LOCALS~1\Temp\bat653.tmp is HTML.ObjectDataHTA
a>> dropper

[snip]
a>> However, I continue to get warning messages each time I download
a>> e-mail.  The message is always the same, except that the number
a>> changes.

TF> Of course. As TB hasn't successfully downloaded and imported the mail,
TF> it will try to do so at every mail check. This will not stop unless
TF> you delete the message on serever using TB's mail despatcher, or turn
TF> off your over-eager AV program.


If I understand correctly, what happened is that when The Bat attempts to
download e-mail, it is first downloaded to the Temp directory.  If the
message has a virus, then my AV software (My eTrust by Computer
Associates) will prevent the e-mail from going into a mail folder.
(Assuming, of course, that the signature files for the AV software
recognize the virus.) However, the virus-laden message still remains
on the server because The Bat would only direct the server to delete
the message AFTER the message finds its way into a Bat folder.
Because the message was only able to go as far as the Temp
subdirectory, The Bat did not instruct the server to delete the
offending e-mail. Is this correct.

Based on this, and not being familiar with "mail despactcher" I
assumed that I needed to delete a virus-laden message off of the
server. So, using webmail, I went out to the server using my web
browser and deleted two suspicious messages, both of which had
attachments.


How do I delete the message on the server using TB's mail despatcher.
And, just exactly, what IS TB's mail despatcher (dispatcher?) It would
appear that these files are in the Temp subdirectory.

Ahhh, but your note gave me an idea.  I turned off AV just long
enough to highlight and delete the bat*.tmp files.


________________________________________________
Current version is 2.11.02 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to