The Bat, Zone ALarm and a Trojan
I am plagued with pop-up warnigns from ZoneAlarm about a Trojan-Spy.HTML.Fraud.gen Zone Alarm keeps reporting it again and again and again - hundreds of reports today alone. When I look at Zone Alarm details it says it is in a whole string of .tmp files i: C:\Documents and Settings\Marten\Local Settings\Temp but when I look there - they are not therer. A fourm message somehwere suggests that that is because by the time I get to look there, The Bat has deleted or removed the tmp files. Can anyone help me out with what to do about this? -- Marten Gallagher Annery Kiln Web Design www.annerykiln.co.uk Using The Bat! 3.99.3 with K9 on Windows XP 5.1 tbudl@thebat.dutaint.com Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, On Fri, 25 May 2007 20:56:37 +0100GMT (25-5-2007, 21:56 +0200, where I live), you wrote: MG A fourm message somehwere suggests that that is because by the time I get MG to look there, The Bat has deleted or removed the tmp files. What happens is that the message gets locked, so TB can't import it and then the file gets deleted. As the file gets deleted in stead of imported TB decides not to delete it from the server. Therefore the next next poll for mail will download the same message again, with the same result. The cure therefore is to delete it from the server. The easiest options are either TB's mail dispatcher or your ISP's web mail (if they support such a feature). -- Groetjes, Roelof FIDO: the Information Frontage Road. http://www.voormijalleen.nl/ The Bat! 3.99.7 Windows XP 5.1 Build 2600 Service Pack 2 2 pop3 accounts OTFE enabled P4 3GHz 2 GB RAM pgptLwF9LtSzl.pgp Description: PGP signature Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, On Fri, 25 May 2007 20:56:37 +0100GMT (25-5-2007, 21:56 +0200, where I live), you wrote: MG A fourm message somehwere suggests that that is because by the time I get MG to look there, The Bat has deleted or removed the tmp files. What happens is that the message gets locked, so TB can't import it and then the file gets deleted. As the file gets deleted in stead of imported TB decides not to delete it from the server. Therefore the next next poll for mail will download the same message again, with the same result. The cure therefore is to delete it from the server. The easiest options are either TB's mail dispatcher or your ISP's web mail (if they support such a feature). Ah ha a coherent response as usual Roelof... Only problem is I have 35 email accounts! Oh well, here goes... -- Marten Gallagher Annery Kiln Web Design www.annerykiln.co.uk Using The Bat! 3.99.3 with K9 on Windows XP 5.1 Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, On Fri, 25 May 2007 21:40:40 +0100GMT (25-5-2007, 22:40 +0200, where I live), you wrote: MG Only problem is I have 35 email accounts! Check your logs, one of them should mention an error during the last download. -- Groetjes, Roelof Welcome to Hell. Here's your copy of Windows95. - Satan http://www.voormijalleen.nl/ The Bat! 3.99.7 Windows XP 5.1 Build 2600 Service Pack 2 2 pop3 accounts OTFE enabled P4 3GHz 2 GB RAM pgpiw6Pr1buLC.pgp Description: PGP signature Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, On Fri, 25 May 2007 20:56:37 +0100GMT (25-5-2007, 21:56 +0200, where I live), you wrote: MG A fourm message somehwere suggests that that is because by the time I get MG to look there, The Bat has deleted or removed the tmp files. What happens is that the message gets locked, so TB can't import it and then the file gets deleted. As the file gets deleted in stead of imported TB decides not to delete it from the server. Therefore the next next poll for mail will download the same message again, with the same result. The cure therefore is to delete it from the server. The easiest options are either TB's mail dispatcher or your ISP's web mail (if they support such a feature). Hmm.. didn;t take as loing as I thouight - I found a numnber of old messages hanging about on the server for a couple of accounts... Good thinking that man.,.. May I cut and paste this advice onto ZoneAlarm forum thread to help otu another person there? -- Marten Gallagher Annery Kiln Web Design www.annerykiln.co.uk Using The Bat! 3.99.3 with K9 on Windows XP 5.1 Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, On Fri, 25 May 2007 21:40:40 +0100GMT (25-5-2007, 22:40 +0200, where I live), you wrote: MG Only problem is I have 35 email accounts! Done it - YES YES YES Thank you, muchos gratias, dank u zeer zeer, hertzlichen danke -- Marten Gallagher Annery Kiln Web Design www.annerykiln.co.uk Using The Bat! 3.99.3 with K9 on Windows XP 5.1 Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, On Fri, 25 May 2007 21:46:00 +0100GMT (25-5-2007, 22:46 +0200, where I live), you wrote: MG May I cut and paste this advice onto ZoneAlarm forum thread to help otu MG another person there? Sure. -- Groetjes, Roelof Windows 95: Making Windows work just like a Mac did 10 years ago! http://www.voormijalleen.nl/ The Bat! 3.99.7 Windows XP 5.1 Build 2600 Service Pack 2 2 pop3 accounts OTFE enabled P4 3GHz 2 GB RAM pgpKgZnNuxXjW.pgp Description: PGP signature Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, Roelof: How did you install TB on that? http://www.voormijalleen.nl/2007/oomhilbert/DSC_0233.html -- Marten Gallagher Annery Kiln Web Design www.annerykiln.co.uk Using The Bat! 3.99.3 with K9 on Windows XP 5.1 Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, On Fri, 25 May 2007 21:46:00 +0100GMT (25-5-2007, 22:46 +0200, where I live), you wrote: MG May I cut and paste this advice onto ZoneAlarm forum thread to help otu MG another person there? Sure. FYI Posted here: http://forums.zonealarm.com/zonelabs/board/message?board.id=MalwareDiscussionmessage.id=2074 -- Marten Gallagher Annery Kiln Web Design www.annerykiln.co.uk Using The Bat! 3.99.3 with K9 on Windows XP 5.1 Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: The Bat, Zone ALarm and a Trojan
Hallo Marten, On Fri, 25 May 2007 21:46:00 +0100GMT (25-5-2007, 22:46 +0200, where I live), you wrote: MG May I cut and paste this advice onto ZoneAlarm forum thread to help otu MG another person there? Sure. FYI Posted here: http://forums.zonealarm.com/zonelabs/board/message?board.id=MalwareDiscussionmessage.id=2074 and FYI, you've made two people happy tonight: http://forum.zonelabs.org/zonelabs/board/message?board.id=MalwareDiscussionmessage.id=2075 -- Marten Gallagher Annery Kiln Web Design www.annerykiln.co.uk Using The Bat! 3.99.3 with K9 on Windows XP 5.1 Current version is 3.99 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
