Re: Question about The bat

2006-10-16 Thread Feli Wilcke
Hello Christian,

On Mon, 16 Oct 2006 19:45:42 +0200GMT Christian wrote:

C> I am running Window-Eyes 5.5. When i tried it about a month ago i
C> couldnt navigate since it didnt use standard controls for buttons, etc.

A friend of mine also uses Windows Eyes, so I know it is possible. She
uses TheBat 3.85.03 but I cannot say which version of Windows Eyes.
Unfortunately she only speeks german but if you whish I could send you
her address per PM.

-- 
Regards,
Feli

The Bat! 3.86.03 ALPHA (beta) on Windows XP 5.1 2600 Service Pack 2



Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question about The bat

2006-10-16 Thread Leif Gregory
Hello Christian,

Monday, October 16, 2006, 11:45:42 AM, you wrote:
> I am running Window-Eyes 5.5. When i tried it about a month ago i
> couldnt navigate since it didnt use standard controls for buttons,
> etc.

Hmmm... Not sure... The only other visually impaired person I know of
who was using TB used Jaws. There were some quirks if I remember, but
they were able to use it ok. I don't recall whether there was anything
to do about TB being in a "classic" state or not.

On the toolbar is Options and under options is themes with one of them
being "Windows Default". I don't know if that'd help.


-- 
  TBUDL/BETA/DEV/TECH Lists Moderator / PGP 0x5D167202
 __       Geocaching:http://gps.PCWize.com
(  )  ( ___)(_  _)( ___)  TBUDP Wiki Site:  http://www.PCWize.com/thebat/tbudp
 )(__  )__)  _)(_  )__)   Roguemoticons & Smileys:http://PCWize.com/thebat
()()()(__)PHP Tutorials and snippets:http://www.DevTek.org

Sometimes *I* can't stand myself, EITHER!




Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Mod: Top posting (was: Question about The bat)

2006-10-16 Thread Roelof Otten
Hallo Christian,

On Mon, 16 Oct 2006 19:45:42 +0200GMT (16-10-2006, 19:45 +0200, where
I live), you wrote:

C> Christian


C> On 2006-10-17 at 00:32 Thomas Fernandez wrote:


Note: This moderator's interjection is a note to all readers and not
just to the person being replied to, even if their post may have
instigated this reply. Please don't feel singled out Christian.

  )<)))'>

This posting violated the list rules regarding top posting.

Top posting, i.e., typing all your reply text at the top of your
message and following it with all quoted text below, is not
encouraged and we actually request that you not do so on this list
because

a) It makes it difficult to glean context from what you typed at the
   top of the message

and

b) It encourages excessive quoting.

We would much prefer if you quote just that much of the message to
which you're replying, so we know what it is you're referring to,
and then below the quotation, type your response. If you're
responding to more than one part of the original, then quote each
part separately and follow each part with your response.

Now, I know that you may not personally prefer this format and that
you may disagree with some of the reasoning here. We very much
respect this. However, this is the format that most of the active
members here prefer and all members are expected, and are being
asked to use the format that will make most of the active membership
here comfortable reading. You'll likely get a more responsive group
when you post using a style that is comfortable for them to read and
understand.

To find out why these MOD messages are posted to the list instead of
private mail, please read the welcome message you received when you
subscribed.

Thank you.


-- 
Groetjes, Roelof

Isn't it funny that only the moderators ever object to chat?


pgpLXuBpCRHgM.pgp
Description: PGP signature

Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Mod: Reply for new thread (was: Question about The bat)

2006-10-16 Thread Roelof Otten
Hallo Christian,

On Mon, 16 Oct 2006 19:24:25 +0200GMT (16-10-2006, 19:24 +0200, where
I live), you wrote:

C> Hi all,


Note: This moderator's interjection is a note to all readers and not
just to the person being replied to, even if their post may have
instigated this reply. Please don't feel singled out Christian.

  )<)))'>

Please don't use reply to start a new thread. Your question has been
posted at the bottom of an unrelated topic. The Bat! is a threading
mail client.

See "View | View threads by | Reference" to see where it ended up.

The result is that it will only be seen by those reading that thread
instead of by all users.

I recommend that you post your question again using a "New message"
if you want to see more replies to your query.

To find out why these MOD messages are posted to the list instead of
private mail, please read the welcome message you received when you
subscribed.

Thank you.


-- 
Groetjes, Roelof

Moderators R Us.


pgpr6xw9Roffw.pgp
Description: PGP signature

Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Mod: Cut mark (was: Question about The bat)

2006-10-16 Thread Roelof Otten
Hallo Christian,

On Mon, 16 Oct 2006 19:24:25 +0200GMT (16-10-2006, 19:24 +0200, where
I live), you wrote:

C> Christian


Note: This moderator's interjection is a note to all readers and not
just to the person being replied to, even if their post may have
instigated this reply. Please don't feel singled out Christian.

  )<)))'>

Please include a signature delimiter in your messages. This consists
of a , i.e., a '-- ' by itself on a line.
This allows your readers, when replying, to quote your text without
the signature and list footers since everything below and including
the sig delimiter is excluded when quoting.

You can easily automate this process by including the sig delimiter in
your templates.

Even if you barely have a signature to speak of, that doesn't make any
difference to whether or not you need a cut mark. You are being
courteous to other readers since at least three lines of text is added
to your signature by the list server.

To find out why these MOD messages are posted to the list instead of
private mail, please read the welcome message you received when you
subscribed.

Thank you.


-- 
Groetjes, Roelof

Have you hugged your moderator today?


pgpvpXEIax44y.pgp
Description: PGP signature

Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re[2]: Question about The bat

2006-10-16 Thread Christian
Hi,
I am running Window-Eyes 5.5. When i tried it about a month ago i couldnt 
navigate since it didnt use standard controls for buttons, etc.
Many thanks,
Christian


On 2006-10-17 at 00:32 Thomas Fernandez wrote:

>Hello Christian,
>
>On Mon, 16 Oct 2006 19:24:25 +0200 GMT (17/10/2006, 00:24 +0700 GMT),
>Christian wrote:
>
>C> I have been trying out the bat, but with some difficulties.
>C> Since I am visually impaired, is it possible to change the
>C> programs look to a more windows classic? The dialogs are not very
>C> accessible to me with my screen reader.
>
>Which screenreader are you using? TB should be accessible by now.
>
>--
>
>Cheers,
>Thomas.
>
>On a Korean kitchen knife... Warning: Keep out of children.
>http://thomas.fernandez.hat-gar-keine-homepage.de/
>
>Message reply created with The Bat! 3.85.03
>under Windows XP 5.1 Build 2600 Service Pack 2
>
>
>
>
>
>
>Current version is 3.85.03 | 'Using TBUDL' information:
>http://www.silverstones.com/thebat/TBUDLInfo.html





Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question about The bat

2006-10-16 Thread Thomas Fernandez
Hello Christian,

On Mon, 16 Oct 2006 19:24:25 +0200 GMT (17/10/2006, 00:24 +0700 GMT),
Christian wrote:

C> I have been trying out the bat, but with some difficulties.
C> Since I am visually impaired, is it possible to change the
C> programs look to a more windows classic? The dialogs are not very
C> accessible to me with my screen reader.

Which screenreader are you using? TB should be accessible by now.

-- 

Cheers,
Thomas.

On a Korean kitchen knife... Warning: Keep out of children.
http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 3.85.03
under Windows XP 5.1 Build 2600 Service Pack 2






Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Question about The bat

2006-10-16 Thread Christian
Hi all,
I have been trying out the bat, but with some difficulties.
Since I am visually impaired, is it possible to change the programs look to a 
more windows classic? The dialogs are not very accessible to me with my screen 
reader.
Many thanks,
Christian



Current version is 3.85.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re[2]: Question About The Bat Structure and Temp Files in XP

2003-03-28 Thread Anne
Friday, March 28, 2003, 3:15:12 PM, Kim wrote:

K> What I'm wondering is in the "Pro" version of Kaspersky, where do they
K> classify The Bat plug-in? Is it grouped under the Mail Checker part
K> (which in Personal is just for Outlook), or is it in another element
K> of the program? Would either of you happen to know? I'd like to avoid
K> that particular DLL file, if possible.


Hi Kim,

The AV plugin for TB! is a COM-based one it says - and you actually
install it from within TB! not from within Kaspersky. To do this you
need to go to the Options menu » Virus Protection » Add Virus Checking
plugins section and click the Add button. You'll be given the option
to add an external plugin (.bav extension) or the Kaspersky one. Select
the Kaspersky one and it'll be automatically installed. Then you just
need to set the options you want in the rest of the tab... i.e. scan
incoming/outgoing, and how to deal with infected mails, attachments,
etc... Next time you launch TB! you'll see the mail plugin load as
well as TB! BTW don't forget to turn off the real time scaner from
checking mail databases/plain text mails if it's enabled already.

-- 
Cheers,
 Anne

 The Bat Email - Unofficial Support Forum:
 http://the-bat-forums.donzeigler.com



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-28 Thread Mary Bull
Hello Kim!

On Friday, March 28, 2003, 9:15 AM, you wrote:

K> Hi Mary and Anne,

K> ... I appreciate all of your helpful information! I have had a problem
K> with the AVG MailChecker.dll file in Kaspersky recently ...

K> ... What I'm wondering is in the "Pro" version of Kaspersky, where do
K> they classify The Bat plug-in? Is it grouped under the Mail Checker
K> part (which in Personal is just for Outlook), or is it in another
K> element of the program? Would either of you happen to know? I'd like
K> to avoid that particular DLL file, if possible.

Kim, I just brought up the Readme file on my Mailchecker subfolder. It
does say that it is only for Outlook. So I may have an unnecessary
component just taking up space--but my HD, RAM, and system resources are
large, and I think I'll just leave it. There was not a word about the
TB! plug-in in this Readme file.

I think the best thing to do would be to ask Kaspersky in what part of
the Pro program the TB! plug-in is stored, explaining that you don't
want Mail Checker, if you upgrade.

It looks to me like the plug-in is separate from Mail Checker, since my
Readme file mentions only Outlook. But I'm just barely a cut above
computer illiterate. Perhaps Anne will have some thoughts.

-- 
Best regards,
Mary

The Bat! 1.61 on Windows XP 5.1 2600 Service Pack 1



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-28 Thread Kim
Hi Mary and Anne,

Friday, March 28, 2003, 9:21:47 AM, you wrote:

> Kim, I thought it might help you in making your comparison to know the
> subfolders that are in my Kaspersky Anti-Virus Personal Pro folder.
> There are 10:

> Control Centre, Mail Checker, Monitor, Rescue Disk, Scanner, Script
> Checker, Updater, Inspector, Office Guard, Virus List Generator.

> You could see if these are the ones in your personal version.

> I do use the plug-in. It works seamlessly--I have it configured for both
> incoming and outgoing mail. I have it configured to ask before taking
> action. The only times I have had any indication of its presence were
> the couple of viruses that it caught--the last one was So Big, which
> came in on a trusted list but was easily deleted.

I appreciate all of your helpful information! I have had a problem
with the AVG MailChecker.dll file in Kaspersky recently, which
concerns me, which I've explained below:

In Kaspersky Personal, there's a Mail Checker feature that's a plug-in
that only works with Outlook. I don't have Outlook, but I still had
originally installed the Mail Checker component (although I was unable
to use it, of course). Recently I uninstalled my older build of
Kaspersky Personal 4.0 and chose to install the newest one. I ran into
a problem, which I contacted Kaspersky about, and the only resolution
we were able to come up with was to uninstall the Mail Checker
component. The problem was this: When uninstalling Kaspersky Personal
(and installing the new version), I received an error message when it
got to AVG MailChecker.dll which was this:

The following files did not self-register or unregister

It then listed the path to the AVG MailChecker.dll file -- then it
gave me the message that "the operating system cannot run", which I
thought was rather odd.

Initially, when this error occurred, the program didn't want to
totally uninstall, so I wrote to Kaspersky and asked them how to
manually uninstall Kaspersky Personal. They sent me a utility that did
so. Although the uninstall process went ok then, When I tried to
reinstall, I received the same error message about AVG
MailChecker.dll. Like I mentioned before, the only way around it was
to totally uninstall Kaspersky, use the clean-up utility they sent me,
and then reinstall, omitting the Mail Checker feature (I also omitted
the Control Center, as I always do because I don't like that feature.
It has always seemed to bog things down, and isn't a totally necessary
element, so I do without it).

What I'm wondering is in the "Pro" version of Kaspersky, where do they
classify The Bat plug-in? Is it grouped under the Mail Checker part
(which in Personal is just for Outlook), or is it in another element
of the program? Would either of you happen to know? I'd like to avoid
that particular DLL file, if possible.

Thanks for your help.  :)

-- 
Best regards,
Kim



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-28 Thread Mary Bull
Hello Anne and Kim!

On Friday, March 28, 2003, 4:15 AM, Anne wrote, replying to Kim:



K>> BTW, do you use the Personal or Personal Pro version of Kaspersky?
K>> If it is Pro, do you find the extras in the Pro version worth the
K>> extra $50?

A> ... For an
A> individual user I very much doubt that the upgrade is worth doing to
A> be honest. It seems to be more aimed at networked PC's. I haven't
A> found anything else in Pro that won't work in Personal except the
A> network facilities. Others using the Pro may be able to add more info
A> though.

I bought the Personal Pro version several months ago without ever using
the Personal version, so I can't compare. They were running a sale and I
got it for about $80. I have been very pleased with it. Occasionally
after an automatic update my keyboard input will slow for a few
minutes--I assume Kaspersky is running an automatic scan using the new
virus signatures then. Since I use my computer only for personal
enjoyment, this occasional slow-down is not a problem for me.

Kim, I thought it might help you in making your comparison to know the
subfolders that are in my Kaspersky Anti-Virus Personal Pro folder.
There are 10:

Control Centre, Mail Checker, Monitor, Rescue Disk, Scanner, Script
Checker, Updater, Inspector, Office Guard, Virus List Generator.

You could see if these are the ones in your personal version.

I do use the plug-in. It works seamlessly--I have it configured for both
incoming and outgoing mail. I have it configured to ask before taking
action. The only times I have had any indication of its presence were
the couple of viruses that it caught--the last one was So Big, which
came in on a trusted list but was easily deleted.

That screech sound effect will certainly get your attention!

-- 
Best regards,
Mary

The Bat! 1.61 on Windows XP 5.1 2600 Service Pack 1



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re[2]: Question About The Bat Structure and Temp Files in XP

2003-03-28 Thread Anne
Friday, March 28, 2003, 12:39:12 AM, Kim wrote:

K> Wow...I didn't realize that. I figured that my Personal license only
K> worked with the Personal version and below.

I didn't either until I tried the Pro version and realised that is
just what happens ;-)  Apparently the licence is what enables the
various features.

K> Thanks for the info! I appreciate your help.

You're very welcome :-)

K> BTW, do you use the Personal or Personal Pro version of Kaspersky? If
K> it is Pro, do you find the extras in the Pro version worth the extra
K> $50?

I still use Personal version at the moment but will be upgrading to
Pro on renewal - simply because we'll be changing our various
individual A/V licences for a multi-user KAV Per Pro one to cover the
network - will be a tad more than 99$ for us though!!! ;-) For an
individual user I very much doubt that the upgrade is worth doing to
be honest. It seems to be more aimed at networked PC's. I haven't
found anything else in Pro that won't work in Personal except the
network facilities. Others using the Pro may be able to add more info
though.

-- 
Cheers,
 Anne

 The Bat Email - Unofficial Support Forum:
 http://the-bat-forums.donzeigler.com



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread Kim
Hi Anne,

Thursday, March 27, 2003, 5:51:27 PM, you wrote:

> Kim I don't know if you're aware but you can download an evaluation
> copy of Kaspersky Personal Pro which includes The Bat! AV plugin and
> use it with your existing KAV key. This will allow you to use KAV's AV
> plugin with TB! (but not give you access to the other Pro features
> such as network drive scanning etc.) Download from www.kaspersky.com

Wow...I didn't realize that. I figured that my Personal license only
worked with the Personal version and below. If I can use the Bat
plug-in part of Kaspersky Personal Pro with my Personal key, even if
the other additional features work, that's good enough for me...and a
whole lot cheaper than spending the extra $50 on the Pro version.

> TB! mails go into the temp directory from the mail server - that's
> where KAV without the plugin holds them if there's a virus involved.

> With the plugin you set KAV realtime scanner not to scan mail folders
> - but you install the KAV AV plugin via TB!'s "virus protection"
> option and this looks after your mail downloads. You can set KAV to
> dump any virus mails into a "Quarantine" folder in the Kaspersky
> program folder, to "Delete" them immediately, or to clean the infected
> parts etc...

> You can also use the plugin to scan mail folders separately on demand.
> It's worth considering as it works extremely well. HTH :-)

Thanks for the info! I appreciate your help.

BTW, do you use the Personal or Personal Pro version of Kaspersky? If
it is Pro, do you find the extras in the Pro version worth the extra
$50?

-- 
Best regards,
Kim



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread Anne
Thursday, March 27, 2003, 8:05:29 PM, Kim wrote:


K> I use Kaspersky Personal as my anti-virus program, and it caught
K> this worm, as I was pulling in my e-mail off the server.

Kim I don't know if you're aware but you can download an evaluation
copy of Kaspersky Personal Pro which includes The Bat! AV plugin and
use it with your existing KAV key. This will allow you to use KAV's AV
plugin with TB! (but not give you access to the other Pro features
such as network drive scanning etc.) Download from www.kaspersky.com


K> Also, by deleting the Bat temp file I'd mentioned above, how much
K> e-mail can I expect to lose? Just the one e-mail, or all from that
K> day? With Becky, I lost an entire day's e-mail when this problem
K> occurred. Not good.  :(

TB! mails go into the temp directory from the mail server - that's
where KAV without the plugin holds them if there's a virus involved.

With the plugin you set KAV realtime scanner not to scan mail folders
- but you install the KAV AV plugin via TB!'s "virus protection"
option and this looks after your mail downloads. You can set KAV to
dump any virus mails into a "Quarantine" folder in the Kaspersky
program folder, to "Delete" them immediately, or to clean the infected
parts etc...

You can also use the plugin to scan mail folders separately on demand.
It's worth considering as it works extremely well. HTH :-)

-- 
Cheers,
 Anne

 The Bat Email - Unofficial Support Forum:
 http://the-bat-forums.donzeigler.com



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread Kim
Hi Marck,

Thanks for the info! I feel *much* better now, and understand the
functionality of The Bat much better now too.  :)

-- 
Best regards,
Kim



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread Kim
Hi David,

Thursday, March 27, 2003, 3:44:32 PM, you wrote:

> With TB!  Your best bet is to use the Kaspersky plugin and let TB!
> itself handle the infected mails instead of scanning durring the
> download.

I would, except that the plug-in isn't available with the $49.95
Personal version of Kaspersky, which is the one I have. It's only
available with the $99.95 Personal Pro version. I've thought about
upgrading, but the Personal version usually works well for me. Have
those that have the Pro version found it's worth the extra $50? The
added convenience *does* sound nice, and I'm up for renewal of my
yearly Kaspersky license in a couple of weeks.  :)

-- 
Best regards,
Kim



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread Marcus Ohlström

On Thursday, March 27, 2003, 21:33, Marck D Pearlstone wrote:

K>> ... Kaspersky flagged the infected mail immediately...so quickly
K>> in fact, that I later found the message was still on the server.
K>> The only remnant on my system was in a temp file located in the
K>> Local Settings\Temp folder, in a file called bat130.tmp

> This is what usually happens when you don't use plug-in AV support.

Not over here, my AV (Norton Corporate Edition 7.6) says it
quarantines the temp file, but still the message gets imported into
TB! as usual. My guess was that TB! writes the temp file just for
security reasons but imports the message into the message base without
touching the temp file (if nothing goes wrong along the way).

My real problem started when my .tbb file got quarantined, therefore I
excluded my mail folder from AV scanning and manually deleted the
infected mail when I got an alert from the temp folder.

So, the question must be, why is TB! able to import even virus
infected messages here when it is not at Kim's? How does it work for
other that is using NAV CE 7.6?

-- 
Regards,
Marcus Ohlström

Using The Bat! v1.62/Beta7 on Windows 2000 5.0 Build 2195 Service Pack 3
PGP Public Key at http://www.canit.se/~marcus/pgp.asc



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread David Calvarese
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 On Thursday, March 27, 2003 at 15:05:29GMT -0500 (which was 3:05 PM
 where I live) 
  Kim wrote and made these points on the subject of "Question About The Bat
Structure and Temp Files in XP":


K> With the Bat, things seemed to work a bit differently. When I went
K> through the process of pulling the file off of the server, Kaspersky
K> flagged the infected mail immediately...so quickly in fact, that I
K> later found the message was still on the server. The only remnant on


With TB!  Your best bet is to use the Kaspersky plugin and let TB!
itself handle the infected mails instead of scanning durring the
download.


- --
Best regards,
David
Member of E-mailaholics International
PGP Key at
http://search.keyserver.net:11371/pks/lookup?op=get&search=0xCC7E7664
Facts just get in the way and impede progress.
Using The Bat! v1.62i on Windows XP 5.1 Build 2600Service Pack 1

-BEGIN PGP SIGNATURE-
Version: 6.5.8ckt http://www.ipgpp.com/
Comment: KeyID: 0x99B71F2ECC7E7664
Comment: Fingerprint: 20C3 F51F AFFC 90F2 A36E  A348 99B7 1F2E CC7E 7664

iQA/AwUBPoNitJm3Hy7MfnZkEQI33ACg0OMBYy3sA/q6G2PpDwQFUE2rydIAn0Cw
nphkr+whXGw//m6Vd3vu5b+/
=dIkH
-END PGP SIGNATURE-



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread Marck D Pearlstone
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Kim,

@27-Mar-2003, 15:05 -0500 (20:05 UK time) Kim [K] in
mid:[EMAIL PROTECTED] said:

K> ... Kaspersky flagged the infected mail immediately...so quickly
K> in fact, that I later found the message was still on the server.
K> The only remnant on my system was in a temp file located in the
K> Local Settings\Temp folder, in a file called bat130.tmp

This is what usually happens when you don't use plug-in AV support.
It can prove to be a problem in that the mail goes cyclic for those
unfamiliar with using the Mail dispatcher (or Telnet or something)
to remove the offending article from the server.

K> I never got to actually *see* if the infected e-mail was ever
K> downloaded to my Inbox in The Bat, but I suspect not

You suspect correctly.

K> ... Where are The Bat temp files usually housed on Windows XP
K> machines?

In the Documents & Settings folder you described.

K> Is a Bat temp file only located there when The Bat is pulling
K> e-mail off the server, and then the temp file gets deleted?

Yes.

K> Also, by deleting the Bat temp file I'd mentioned above, how much
K> e-mail can I expect to lose? Just the one e-mail, or all from
K> that day?

Just one message. Each message gets its own temp file.

- --
Cheers -- .\\arck D Pearlstone -- List moderator
TB! v1.63 Beta/7 on Windows 2000 5.0.2195 Service Pack 2
'
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1rc1-nr1 (Windows 2000)

iD8DBQE+g2AVOeQkq5KdzaARAqz9AKDZCy9s9IQjbAuv1SjDPbM/XoDnAQCePyEg
PIRHz7i6XNecOmndXf/Tb34=
=n4Gu
-END PGP SIGNATURE-




Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread Jonathan Angliss
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thursday, March 27, 2003, Kim wrote...

> Also, by deleting the Bat temp file I'd mentioned above, how much
> e-mail can I expect to lose? Just the one e-mail, or all from that
> day? With Becky, I lost an entire day's e-mail when this problem
> occurred. Not good. :(

Ouch... I'd be kicking a developer or two if that kind of thing
happened to me. No... you don't have to worry. What is happening is TB
grabs the mail into a temp file, each mail gets its own temp file.
Then that temp file is imported into the mail base
(foldername/messages.tbb). What you're seeing is your virus scanner
checks the file as it is created, and sees the iframe flaw, and locks
the file up so nobody can read it. When this happens, TB drops the
message from download, and moves onto the next. Because it couldn't
read the temp file, it doesn't attempt to delete it from the server,
hence the reason you see it on the server, and you have a temp file on
your system. Deleting that temp file won't cause you any harm once :)

- --
Jonathan Angliss
([EMAIL PROTECTED])

-BEGIN PGP SIGNATURE-

iQA/AwUBPoNgUSuD6BT4/R9zEQJa3ACgz8w+pL5Ptk734Vsdn7TicaFZNXgAn0C3
YXBbSXBaTTnUGWATMzabyzIA
=LCkR
-END PGP SIGNATURE-



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Question About The Bat Structure and Temp Files in XP

2003-03-27 Thread Kim
Hi All,

Being a relatively new user of The Bat (I previously used Becky Mail),
until today, I had not received a virus or worm in my e-mail. Today,
one of the users on one of my mailing lists sent an e-mail that had
the IFrame Exploit worm. I've seen this worm before, when I used
Becky. I do know it is an older worm, and it takes advantage of a
security hole in Internet Explorer 5.01, 5.5, and Outlook (and I'm
guessing Outlook Express). I also know it does not affect Internet
Explorer 6.0 or Windows XP (both of which I have). I use Kaspersky
Personal as my anti-virus program, and it caught this worm, as I was
pulling in my e-mail off the server.

My experience in the past has been with Becky...and when I received
such an e-mail, Kaspersky wouldn't let me *touch* the thing, even to
delete it. The only way to get rid of it was to go into my Becky
directory, find the offending temp and mailbox files, turn off my
Kaspersky Monitor, and directly delete the thing holding down my SHIFT
key, as to bypass the Recycle Bin. I then scanned everything on my
system thoroughly, to make sure that all was well.

With the Bat, things seemed to work a bit differently. When I went
through the process of pulling the file off of the server, Kaspersky
flagged the infected mail immediately...so quickly in fact, that I
later found the message was still on the server. The only remnant on
my system was in a temp file located in the Local Settings\Temp
folder, in a file called bat130.tmp (Local Settings being a hidden
folder nestled in the file of origination which was "Documents and
Settings"). I originally thought the infected e-mail was from a friend
of mine as I had just opened her e-mail (on a different e-mail
account) at the same time the new headers were downloading from this
account, and Kaspersky screeched at me. I always check the headers on
the server before bringing anything in, just for this reason, but
since all were from my mailing lists, I figured all were safe. Anyway,
I found out after scanning for the worm that the file indeed came from
an address originating from one of my subscribed mailing lists. I have
gotten verification of this since, from another user on the same list
that received the same infected e-mail on his e-mail server.

To make a long story shorter, I never got to actually *see* if the
infected e-mail was ever downloaded to my Inbox in The Bat, but I
suspect not (and it's definitely not there now). Since I thought it
was being brought in from my other e-mail account, I never looked.
After Kaspersky gave me the name of the sender of the infected e-mail,
and I was later able to identify the same e-mail on the server, it
appears it made it only as far as The Bat temp file listed above.
Where are The Bat temp files usually housed on Windows XP machines?
When using The Bat following the deletion of the temp file I mentioned
above, I noticed that a similar temp file was *not* created in that
directory. Is a Bat temp file only located there when The Bat is
pulling e-mail off the server, and then the temp file gets deleted? I
guess what I'm wondering the locations where The Bat temp files are
kept so that in the future, I can scan those areas if I suspect an
infected e-mail.

Also, by deleting the Bat temp file I'd mentioned above, how much
e-mail can I expect to lose? Just the one e-mail, or all from that
day? With Becky, I lost an entire day's e-mail when this problem
occurred. Not good.  :(

Thanks in advance.

-- 
Best regards,
Kim



Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html