If you are running nortons with Virus definitions dated prior to April 23, 2002; then Norton's may detect this as Backdoor.Trojan or Downloader.Trojan. I've seen the ??.??.1 extension creations but usually on a iis ftp server.
~Rick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, May 16, 2002 2:51 PM - MGMT.TV To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Web Messaging & Backdoor.Trojan >Interesting enough, the file that it is finding it in is not the main.mbx >file. It seems to be catching the virus after declude but before the >message is appended to the mail.mbx file when it is main.mbx.1. This way it >seems to be caught without the user needing to log in with the web >interface. I don't know of any case where IMail has a main.mbx.1 file -- I haven't seen that one before. Are you sure that is the correct name of the file? IMail does use a temporary filename ("main.~bx", I think) when it is changing the main.mbx file, could that have been it? "Backdoor.Trojan" sounds like a generic name used if a suspicious file is found, so it may be that there is something legitimate (such as a .VBS script that accesses the registry) that Norton thinks could be a virus, but isn't. -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/ ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
