Hello Ian,
A reminder of what Ian A. White on TBBETA typed on:
13 May 2005 at 22:40:20 GMT +0200
I shall forward them the message in its entirety and ask them why it
was considered infected.
It's probably because the name of a common virus is included in the text
but I'll be interested
--On 13 May 2005 23:41 +0200 MAU [EMAIL PROTECTED] wrote:
Probably because 'document_word.pif. *.pif are typical infected files.
I didn't send any pif files, just plain text with a NOD32 virus report in
it.
--
Tony.
M.
Current beta is
Hello MAU everyone else,
on 13-Mai-2005 at 13:06 you (MAU) wrote:
I installed this plugin a few days ago just for testing it, but I have
not received any infected messages since then. Do you have any in your
Quarantine folder that you could forward to me?
You can create your own test virus:
Hello Marek,
On Fri, 13 May 2005 12:58:03 +0200 GMT(5/13/2005, 5:58 AM -0600 GMT),
per mid:[EMAIL PROTECTED] Marek Mikus wrote:
Ok, i managed to get the version number of the plugin, it's 1.1092.
this is correct plugin and correct version number,
I downloaded from
Hello all,
Saturday, May 14, 2005, Greg Strong wrote:
this is correct plugin and correct version number,
I downloaded from http://www.ritlabs.com/en/solutions/avirus.php.
The version number I see in Options | Preferences | Protection |
Antivirus | Virus checking Plug-ins | version is
Hello Marek,
On Sat, 14 May 2005 19:48:42 +0200 GMT(5/14/2005, 12:48 PM -0600 GMT),
per mid:[EMAIL PROTECTED] Marek Mikus wrote:
The version number I see in Options | Preferences | Protection |
Antivirus | Virus checking Plug-ins | version is 1.1096.
this is number of virus base currently
Hello all,
Saturday, May 14, 2005, Greg Strong wrote:
The version number I see in Options | Preferences | Protection |
Antivirus | Virus checking Plug-ins | version is 1.1096.
this is number of virus base currently available in NOD32.
Ok how do I get version # of the plug-in?
I'm on the
Hello Marek,
On Sat, 14 May 2005 20:07:54 +0200 GMT(5/14/2005, 1:07 PM -0600 GMT),
per mid:[EMAIL PROTECTED] Marek Mikus wrote:
Ok how do I get version # of the plug-in?
I'm on the trial version of NOD32. Just want to make sure I'm using the
correct version of the plug-in. Thanks!
this
Hello all,
Saturday, May 14, 2005, Greg Strong wrote:
,- [ per mid:[EMAIL PROTECTED] ]
| Ok, i managed to get the version number of the plugin, it's 1.1092.
|
| this is correct plug-in and correct version number,
`-
Unless you meant version # of the virus signature database
Hello Tony,
Probably because 'document_word.pif. *.pif are typical infected files.
I didn't send any pif files, just plain text with a NOD32 virus report in
it.
Yes, but the text 'document_word.pif was in your message, wasn't it?
--
Best regards,
Miguel A. Urech (El Escorial - Spain)
Hello Alexander,
I installed this plugin a few days ago just for testing it, but I have
not received any infected messages since then. Do you have any in your
Quarantine folder that you could forward to me?
You can create your own test virus:
http://www.eicar.org/anti_virus_test_file.htm
Hello MAU,
just now (on 05/14/2005 at 21:49) [EMAIL PROTECTED] wrote:
I didn't send any pif files, just plain text with a NOD32 virus report in
it.
Yes, but the text 'document_word.pif was in your message, wasn't it?
No, Tonys message didn't have a file *.pif in its message, nor was its
--On 14 May 2005 21:49 +0200 MAU [EMAIL PROTECTED] wrote:
Yes, but the text 'document_word.pif was in your message, wasn't it?
No it wasn't. All I did was to create a *new* message and then pasted the
NOD32 report into it. There was nothing different about it to this message
whereby your text
Hello Greg,
Antivirus | Virus checking Plug-ins | version is 1.1096.
Hmmm! A new version or just a typo?
That I know of, the version displayed is that of the last _signatures_
file which, as of today, is 1.1096.
--
Best regards,
Miguel A. Urech (El Escorial - Spain)
Using The Bat! v3.5
Hello Manuel,
I didn't send any pif files, just plain text with a NOD32 virus report in
it.
Yes, but the text 'document_word.pif was in your message, wasn't it?
No, Tonys message didn't have a file *.pif in its message, nor was its
content pasted in the message.
I know, but the text
Hello Tony,
Yes, but the text 'document_word.pif was in your message, wasn't it?
No it wasn't. All I did was to create a *new* message and then pasted the
NOD32 report into it. There was nothing different about it to this message
whereby your text is pasted as a quote above.
It was a
--On 14 May 2005 22:31 +0200 MAU [EMAIL PROTECTED] wrote:
That probably that's
what Ian's ISP virus scanning saw and flagged Tony's message as
infected.
Well if that's the case Ian will probably let us know because you included
those words in the past 3 or 4 of your posts, And if it picks it up
Hey MAU,
just now (on 05/14/2005 at 22:31) [EMAIL PROTECTED] wrote:
Now, does that text contain the words/letters document_word.pif in it,
or not?
Ohm, hmm,... have to go now. :D
It is actually a copy of the message headers that some ISPs look at for
possible spam or viruses.
Okay, but
--On 14 May 2005 22:32 +0200 MAU [EMAIL PROTECTED] wrote:
See my reply to Manuel, please.
I've seen it and replied to it. Just waiting for Ian's comments to see if
your posts got flagged.
--
Tony.
M.
Current beta is (none) | 'Using
Hello Tony,
Well if that's the case Ian will probably let us know because you included
those words in the past 3 or 4 of your posts, And if it picks it up from
within one of my messages, it'll certainly pick it up from yours.
Maybe not because there is a difference. Your message included
--On 14 May 2005 22:45 +0200 MAU [EMAIL PROTECTED]> wrote:
> Maybe not because there is a difference.
My mailboxes have server side virus scanning and they never picked it up. Either way it's good it did get flagged, better safe than a penicillin shot in the buttocks :)
--
Tony.
M.
Hi Bat! folks,
Ok, i managed to get the version number of the plugin, it's 1.1092.
Hth.
And to the mods, do i still not have a cut mark? I see it in the
message editor as i compose so it's there at least until i send the
mail.
--
/Krister mailto:[EMAIL PROTECTED]
This mail brought to you by The
Hello Krister,
And to the mods, do i still not have a cut mark?
Yes, you have it and works fine.
--
Best regards,
Miguel A. Urech (El Escorial - Spain)
Using The Bat! v3.5 Return RC9 on Windows 2000 5.0 Service Pack 4
Current
Hello all,
Friday, May 13, 2005, Krister Ekstrom wrote:
Ok, i managed to get the version number of the plugin, it's 1.1092.
this is correct plugin and correct version number, that's strange, I
am using plugin and NOD32 for months and never saw any warning during
sending :-(
--
Bye
Marek
On Friday, May 13, 2005 at 5:58:03 AM [GMT -0500], Marek Mikus wrote:
this is correct plugin and correct version number, that's strange, I
am using plugin and NOD32 for months and never saw any warning during
sending :-(
Does that plugin version work with the new NOD32 v2.5 that I just
Hello Marek,
this is correct plugin and correct version number, ...
I installed this plugin a few days ago just for testing it, but I have
not received any infected messages since then. Do you have any in your
Quarantine folder that you could forward to me?
TIA.
--
Best regards,
Miguel A.
Hello all,
Friday, May 13, 2005, Allie Martin wrote:
this is correct plugin and correct version number, that's strange, I
am using plugin and NOD32 for months and never saw any warning during
sending :-(
Does that plugin version work with the new NOD32 v2.5 that I just
upgraded to?
I am
Hello Allie,
A reminder of what Allie Martin on TBBETA typed on:
13 May 2005 at 13:04:44 GMT +0200
Does that plugin version work with the new NOD32 v2.5 that I just
upgraded to?
I'm using the very latest version of NOD32 and that pluggin is working
fine here. At least I get no errors
Hello MAU,
A reminder of what MAU on TBBETA typed on:
13 May 2005 at 13:09:05 GMT +0200
Do you have any in your Quarantine folder that you could forward to me?
I'd like to test that too if I may.
--
Tony.
Using The Bat! v3.5 Return RC9 Windows XP Home SP2
Pentium IV, 2.4Ghz Home Built
Hello all,
Friday, May 13, 2005, MAU wrote:
this is correct plugin and correct version number, ...
I installed this plugin a few days ago just for testing it, but I have
not received any infected messages since then. Do you have any in your
Quarantine folder that you could forward to me?
I
Hello Marek,
A reminder of what Marek Mikus on TBBETA typed on:
13 May 2005 at 15:01:50 GMT +0200
I have exported 10 infected messages I have in Quarantine, You can
download it from here:
What do we do with it?
I scanned it with NOD32 and got this:
date: 13.5.2005 time: 14:04:07
Hello all,
Friday, May 13, 2005, Tony Boom wrote:
I have exported 10 infected messages I have in Quarantine, You can
download it from here:
What do we do with it?
I scanned it with NOD32 and got this:
date: 13.5.2005 time: 14:04:07
Scanned disks, directories and files: C:\Documents
Hello Marek,
A reminder of what Marek Mikus on TBBETA typed on:
13 May 2005 at 15:16:57 GMT +0200
file is password-protected, so antivirus can't check its content.
I was talking about after I extracted it, after entering the password.
--
Tony.
Using The Bat! v3.5 Return RC9 Windows XP
Hello Marek,
Unpack it, import to TB and check folder via Folder | Check for
viruses.
That works, detected all of them. Now I have to send one of them to
myself and see if it is scanned/detected when receiving.
--
Best regards,
Miguel A. Urech (El Escorial - Spain)
Using The Bat! v3.5
Hello Marek,
http://www.thebat.cz/files/quarantine.rar
Password is quarantine
:-)
--
Best regards,
Miguel A. Urech (El Escorial - Spain)
Using The Bat! v3.5 Return RC9 on Windows 2000 5.0 Service Pack 4
Current beta is 3.5
Hello Marek,
Unpack it, import to TB and check folder via Folder | Check for
viruses.
I have sent some of them between different accounts and plugin is
detecting them.
Thanks so muck.
--
Best regards,
Miguel A. Urech (El Escorial - Spain)
Using The Bat! v3.5 Return RC9 on Windows 2000 5.0
Hello MAU,
A reminder of what MAU on TBBETA typed on:
13 May 2005 at 16:39:41 GMT +0200
and plugin is detecting them.
Me too and I get this:
This part was removed because it was infected.
Anti-virus reports:
Win32/Netsky.D worm
The original part header follows:
Content-Type:
Hello Tony,
Me too and I get this:
This part was removed because it was infected.
I'm just sending them to Quarantine folder.
--
Best regards,
Miguel A. Urech (El Escorial - Spain)
Using The Bat! v3.5 Return RC9 on Windows 2000 5.0 Service Pack 4
Hello Ian,
I shall forward them the message in its entirety and ask them why it
was considered infected.
Probably because 'document_word.pif. *.pif are typical infected files.
--
Best regards,
Miguel A. Urech (El Escorial - Spain)
Using The Bat! v3.5 Return RC9 on Windows 2000 5.0 Service
39 matches
Mail list logo
