Current Norton defs are May 15th. tom ----- Original Message ----- From: "Rick Leske" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, May 16, 2002 4:34 PM Subject: RE: [IMail Forum] Web Messaging & Backdoor.Trojan
> If you are running nortons with Virus definitions dated prior to April 23, > 2002; then Norton's may detect this as Backdoor.Trojan or Downloader.Trojan. > I've seen the ??.??.1 extension creations but usually on a iis ftp server. > > ~Rick > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry > Sent: Thursday, May 16, 2002 2:51 PM - MGMT.TV > To: [EMAIL PROTECTED] > Subject: RE: [IMail Forum] Web Messaging & Backdoor.Trojan > > > > >Interesting enough, the file that it is finding it in is not the main.mbx > >file. It seems to be catching the virus after declude but before the > >message is appended to the mail.mbx file when it is main.mbx.1. This way > it > >seems to be caught without the user needing to log in with the web > >interface. > > I don't know of any case where IMail has a main.mbx.1 file -- I haven't > seen that one before. Are you sure that is the correct name of the > file? IMail does use a temporary filename ("main.~bx", I think) when it is > changing the main.mbx file, could that have been it? > > "Backdoor.Trojan" sounds like a generic name used if a suspicious file is > found, so it may be that there is something legitimate (such as a .VBS > script that accesses the registry) that Norton thinks could be a virus, but > isn't. > > -Scott > --- > Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for > IMail. http://www.declude.com > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > Please visit the Knowledge Base for answers to frequently asked > questions: http://www.ipswitch.com/support/IMail/ > ___________________________________________________________________ > Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. > > > ___________________________________________________________________ > Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > Please visit the Knowledge Base for answers to frequently asked > questions: http://www.ipswitch.com/support/IMail/ > Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
