http://www.ritlabs.com New posts in Strange behavior of anti-virus software of forum at www.ritlabs.com [www.ritlabs.com] en http://backend.userland.com/rss2 Thu, 04 Feb 2010 21:21:11 +0200 Strange behavior of anti-virus software in forum The Bat! - Configuring the E-mail Client.
Hi,

Thanks!  Indeed, I looked at the logs (in Bat), and found stuff like that:

04/02/2010, 14:08:22: FETCH - 203 messages in the mailbox, 1 new
04/02/2010, 14:08:23: FETCH - Received message from matt@mattkruse.com, size: 42090 bytes, subject: "Re: Extended Mail"
!04/02/2010, 14:08:23: FETCH - could not store message (file name - C:\DOCUME~1\mblazejc\LOCALS~1\Temp\bat189.tmp)
04/02/2010, 14:08:23: FETCH - connection finished - 1 messages received

So, there was one offending message, and The Bat has been trying to download it for the last 2 days.  I logged on to my e-mail account via WebMail, deleted the e-mail, and everything is back to normal!

Thanks a lot!

Michal
04 February 2010 21:21:11, Phrixo Psakpinoglou.]]> http://www.ritlabs.com/en/forums/forum4/topic9141/message31181/ http://www.ritlabs.com/en/forums/forum4/topic9141/message31181/ Thu, 04 Feb 2010 21:21:11 +0200 The Bat! - Configuring the E-mail Client Strange behavior of anti-virus software in forum The Bat! - Configuring the E-mail Client.
probably AV deletes the message, and theBat thinks it's not received, so tries to download it again which triggers another AV alert. Or something like that.
Most mail servers have AV protection or some sorting capabilities or option to create rules. If yours has AV enable it, or see if you can sort messages with potentially unsafe attachments in the server's trash folder.
04 February 2010 19:24:05, bigg one.]]> http://www.ritlabs.com/en/forums/forum4/topic9141/message31178/ http://www.ritlabs.com/en/forums/forum4/topic9141/message31178/ Thu, 04 Feb 2010 19:24:05 +0200 The Bat! - Configuring the E-mail Client Strange behavior of anti-virus software in forum The Bat! - Configuring the E-mail Client.
Hi,

For the last two days, the Bat has been interacting in a strange way with my antivirus app (TREND MICRO OfficeScan).

When The Bat is running, every 10-15 minutes I get a message from the antivirus saying that it found WORM_NETSKY.P in my local temp folder.  The file name is always like this:
  bat1D.tmp (document.txt            .exe)
(yes, that's many spaces between .txt and .exe).

It says that the file has been quarantined, but the same message comes back over and over.  The file name changes every time (bat59.tmp, bat32.tmp etc.).

If I close The Bat, the messages don't appear anymore.

I've scanned the entire Bat installation directory.  I've searched for strange attachments.  Nothing.

Also, this started happening out of the blue.  I didn't install anything new at that time.

Does anyone have an idea about what this is about?

Oh yes, I was using an early version 4 before, and today I've upgraded to 4.2.23.

Best,
Michal
04 February 2010 17:19:26, Phrixo Psakpinoglou.]]> http://www.ritlabs.com/en/forums/forum4/topic9141/message31176/ http://www.ritlabs.com/en/forums/forum4/topic9141/message31176/ Thu, 04 Feb 2010 17:19:26 +0200 The Bat! - Configuring the E-mail Client