Re: DLL AVV in (kav.bav)
Hello Hendrik, Friday, January 22, 2010, 4:00:59 AM, you wrote: HO Normally, in Windows XP, Kaspersky is changing it only once at HO installation, but afterwards it respects the settings made by hand. Well XP gives, in general, to any User the status of Admin power. I think that it might be good for Trojans and Virus of all sort but, of course, I am not an expert to confirm this. HO Did you try to set the read-only attribute to the AVConfig.INI ? Ok. Done and this action has, apparently, prevent Kaspersky to make modifications to AVConfig.INI. On the other hand this action is also bringing a side effect to TheBat!. Using Options, Preferences, the item related to anti-virus cannot be modified because AVConfig.INI is read only (attrib +R). I've power off and on and got no warning message anymore. Maybe TB! developers could find something new to improve next TB! releases regarding the interaction with AV programs. By the way, Kaspersky anti-spam is set to TB! without issues so far. Thanks for your good idea! -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Cesar Santos wrote on 20/01/2010 at 11:59:35 +1100 subject DLL AVV in (kav.bav) : Hello mark-toss, Tuesday, January 19, 2010, 9:55:36 PM, you wrote: mt So just make sure the KAV changes are still OK, and then try mt re-doing the changes in The Bat! Worked for me. Hi, Mark I think I will blame Windows 7 64-bit because nothing worked out. I tried as you suggested but got the same pop up screen, unfortunately. Thanks anyway. Normally, if you change the settings _both_ in Kaspersky and in TheBat it should do... Anyway, you can try to edit the ini file containing the Plugin info: yourpath\MAIL\AVConfig.INI I have the following content to enable the Plugin: -8- [General] CheckOpenAttach=1 CheckSaveAttach=1 CheckOutgoing=1 CheckMail=1 SendNotify=0 NotifyTemplate=%TO\3D\22\22%-\0D\0A%IF:\22%OFROMADDR\22\3D\22%ORETURNPATH\22:\22%TO\3D\27%OFROMNAME\20%OFROMADDR\27\22:\22%TO\3D\27%ORETURNPATH\27\22%-\0D\0A%IF:\22%ORETURNPATH\22\3D\22\22:\22%TO\3D\27%OFROMNAME\20%OFROMADDR\27\22%-\0D\0AAttention!\0D\0A\0D\0AIt\20seems\20you\20have\20got\20a\20virus\20on\20your\20machine!\0D\0APlease\20make\20sure\20you\20have\20the\20latest\20update\20of\20your\20virus\20scanner\0D\0Aand\20check\20all\20your\20files\20right\20away!\0D\0A\0D\0AThe\20headers\20of\20infected\20mail\20follow:\0D\0A-\0D\0A%HEADERS\0D\0A-\0D\0A\0D\0A--\20\0D\0ATake\20care,\0D\0AThe\20Bat!\20-\20automatic\20mail\20servant\20of\20%FROMNAME.\0D\0A Action=4 [Checkers] Count=1 Checker #1=TAVDLLPlugin.C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\kav.bav -8- And this one without the Plugin: -8- [General] CheckOpenAttach=0 CheckSaveAttach=0 CheckOutgoing=0 CheckMail=0 SendNotify=0 NotifyTemplate=%TO\3D\22\22%-\0D\0A%IF:\22%OFROMADDR\22\3D\22%ORETURNPATH\22:\22%TO\3D\27%OFROMNAME\20%OFROMADDR\27\22:\22%TO\3D\27%ORETURNPATH\27\22%-\0D\0A%IF:\22%ORETURNPATH\22\3D\22\22:\22%TO\3D\27%OFROMNAME\20%OFROMADDR\27\22%-\0D\0AAttention!\0D\0A\0D\0AIt\20seems\20you\20have\20got\20a\20virus\20on\20your\20machine!\0D\0APlease\20make\20sure\20you\20have\20the\20latest\20update\20of\20your\20virus\20scanner\0D\0Aand\20check\20all\20your\20files\20right\20away!\0D\0A\0D\0AThe\20headers\20of\20infected\20mail\20follow:\0D\0A-\0D\0A%HEADERS\0D\0A-\0D\0A\0D\0A--\20\0D\0ATake\20care,\0D\0AThe\20Bat!\20-\20automatic\20mail\20servant\20of\20%FROMNAME.\0D\0A Action=4 [Checkers] Count=0 -8- Make sure to have an working backup of your ini file! -- Sincerely Hendrik Oesterlin - email hendrikmail2...@yahoo.de TheBat! 4.2.18 Christmas Edition - Regula Anti-Spam Plugin 2.2.7.0 Extended Macro Plugin 1.1.91.0 - Windows XP 5.1 Build 2600 Service Pack 3 ___ Der frühe Vogel fängt den Wurm. Hier gelangen Sie zum neuen Yahoo! Mail: http://mail.yahoo.de Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hello Hendrik, Thursday, January 21, 2010, 7:49:20 AM, you wrote: HO Normally, if you change the settings _both_ in Kaspersky and in TheBat HO it should do... HO Anyway, you can try to edit the ini file containing the Plugin info: HO yourpath\MAIL\AVConfig.INI Yes, I went to the folder c:\users\tijuco\appdata\roaming\the bat I've copied AVConfig.INI to old_AVConfig_INI_file (backup just in case). I've edited it using nano editor (ascii) as you told, saved and called again TB! Nothing was pop up about the dll message. Then I turned computer off and then on again, calling TheBat... and then... SURPRISE ... The pop up message about dll avv kav.bav WAS THERE AGAIN... LOL I went again to the same path and edited the same AVConfig.INI. It was the same as before. So I conclude that there exists another file which is mandatory over this AVConfig.INI, maybe some entry in the Windows Register or even something inside TheBat! compiled program. Anyway, I've opened a ticket to TheBat! support team. Maybe next update they can give a way out to this issue and to the problem with UAC on Windows7 (I am running Windows 7 with UAC turned off). I hope that the developers guys also read TBUDL. Thanks Hendrik for keeping your attention to this matter. -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hello Hendrik, Thursday, January 21, 2010, 7:49:20 AM, you wrote: HO Anyway, you can try to edit the ini file containing the Plugin info: HO yourpath\MAIL\AVConfig.INI Hendrik I've made another test with TB! off a) went to AVConfig.INI b) edited it according to your suggestion and saved c) looked into Kaspersky and verified everything was kept as suggested (no TB plugin, but only checked SMTP/POP... d) turned off computer and then after some minutes turned on again. e) WITHOUT calling TB! program went to AVConfig.INI folder and edited it (I am emphasizing that I didn't called thebat); f) The file AVConfig.INI was again with the information to check KAV line... How it could be if I didn't call TB! Every time I edit AVConfig.INI, remove the lines about KAV checking and replace 1 with 0 on each item of virus checking, saving, turn off and on again, AVConfig.INI returns the same way, keeping KAV checking. Is there any TB! Task that is previously loaded before the main TB! program? Is Kaspersky changing TB! AVConfig.INI without being asked for? I don't know... So no matter actions I take it comes as before after turning computer off and on. Just making me mad! -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hi, on Thu, 21 Jan 2010 13:41:12 -0200GMT (21.01.2010, 16:41 +0100GMT here), Cesar Santos wrote: CS [The Bat! and Kaspersky AV - changes of settings do not stick] CS Just making me mad! I don't know Kaspersky AV in particular, but the thought came to my mind, that it might be necessary to make the changes related to an AV program with admin privileges to make them stick. Did you try that? -- Cheers Peter Pepsi Brings You Back to Life was translated into Chinese as Pepsi Brings Your Ancestors Back from the Grave. Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hello Peter, Thursday, January 21, 2010, 4:15:16 PM, you wrote: PM I don't know Kaspersky AV in particular, but the thought came to my PM mind, that it might be necessary to make the changes related to an AV PM program with admin privileges to make them stick. Did you try that? I didn't try as admin user because the configuration files are inside my home domain and I suppose I have the ownership over them. I think it would be a problem if I try to modify a file inside Program Files. Anyway, considering I am trying every suggestion, I went to DOS as administrator and changed AVConfig.INI one more time. Turned off and on again and got the same message of KAV DLL being popped up. Kaspersky has no files available, at least of my knowledge, that can be editable. All stuff is made from the GUI and looks fine, I mean, the TB! plugin is not marked but only POP/SMTP/... has the item checked x. Thanks anyway. -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Is Kaspersky changing TB! AVConfig.INI without being asked for? I think you should make sure Kaspersky is NOT running when you edit its INI-file. It might be saving its marbles when you tell Windows to shut down - hence, your manual edits are wiped. Try to edit the INI-file and save the changes - then note the time stamp. Then wait for some 5 minutes and shut down Windows. Note the time of the shut down. Wait another few minutes and turn the machine back on - now, what's the time stamp of the INI-file? Compare the file stamp with the times of shut down and startup. -- St Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hello St, Thursday, January 21, 2010, 7:16:31 PM, you wrote: SMN I think you should make sure Kaspersky is NOT running when you SMN edit its INI-file. It might be saving its marbles when you tell First of all thanks for your message. I'd like to say that the INI file belongs to TheBat! and not to the AV Kaspersky. Taking your suggested steps didn't modify the situation. Whenever Kaspersky is activated the AVConfig.INI changes and include the configuration that brings the pop up DLL AVV screen. In short, I believe this should be necessary somehow to TheBat! In this case, IMHO, it should be transparent to the user and not showing. It is not something that harms the use of the product but could work in background, no matter if the user choose to use TB! AV plugin or not. Likewise the UAC control. There are opinions against and for it and, again, IMHO, I think it should be modeled in order to prevent the user to give authorization all the time. Thanks all TBUDL subscribers that are reading this mail and offering help. -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Cesar Santos wrote on 22/01/2010 at 02:41:12 +1100 subject DLL AVV in (kav.bav) : Is Kaspersky changing TB! AVConfig.INI without being asked for? Yes, it is. Normally, in Windows XP, Kaspersky is changing it only once at installation, but afterwards it respects the settings made by hand. It is apparently an Kasperky/Win7 issue. you could ask about this in the Kaspersky forum http://forum.kaspersky.com/ Or make an search first, if someone else already had the same issue. Did you try to set the read-only attribute to the AVConfig.INI ? You can also try to delete (or rename) the kav.bav file (make an backup first!). You will then obtain at least error messages in the log of TheBat, but it should work. -- Sincerely Hendrik Oesterlin - email hendrikmail2...@yahoo.de TheBat! 4.2.18 Christmas Edition - Regula Anti-Spam Plugin 2.2.7.0 Extended Macro Plugin 1.1.91.0 - Windows XP 5.1 Build 2600 Service Pack 3 ___ Der frühe Vogel fängt den Wurm. Hier gelangen Sie zum neuen Yahoo! Mail: http://mail.yahoo.de Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hello Dwight, Monday, January 18, 2010, 12:41:29 PM, you wrote: DC but you've gotten rid of the objectionable popup? Oops... I thought the issue had called off but I was wrong. When I turned on my computer the message was shown again and I went to Options, Preferences. There still remains the information: Virus Checking Plug-in: Kaspersky Status OK... and so on... Likewise the options for Check incoming mail... and Check outgoing mail both were marked. I am sure that I have unmarked and delete the information about Virus Checking. Maybe I should look into another place and not to the user interface other than Options Preferences I am not sure if I should modify something into the register or ini file configuration. -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
I'm also running Kaspersky Anti-Virus 2010 and followed the instructions given
for disabling the pop-up (by settings in both KAV and The Bat!). After I
closed and re-started The Bat!, like you the dll pop-up was still there, and
the changes I made in The Bat! were not set. So I re-did them in The Bat!,
closed the program and restarted and all was well -- no pop-up, and the changes
I made were still OK. Just to be sure, I closed and re-started and everything
was still fine. And still is now. My guess is that you need to make the KAV
changes while The Bat! is not running.
So just make sure the KAV changes are still OK, and then try re-doing the
changes in The Bat! Worked for me.
Mark
Tuesday, January 19, 2010, 9:18:18 AM, Cesar Santos wrote: {snip}
Oops... I thought the issue had called off but I was wrong. When I
turned on my computer the message was shown again and I went to
Options, Preferences. There still remains the information: Virus
Checking Plug-in: Kaspersky Status OK... and so on...
Likewise the options for Check incoming mail... and Check outgoing
mail both were marked.
I am sure that I have unmarked and delete the information about Virus
Checking.
Maybe I should look into another place and not to the user interface
other than Options Preferences
I am not sure if I should modify something into the register or ini
file configuration.
Current version is 4.2.12.4 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hello mark-toss, Tuesday, January 19, 2010, 9:55:36 PM, you wrote: mt So just make sure the KAV changes are still OK, and then try mt re-doing the changes in The Bat! Worked for me. Hi, Mark I think I will blame Windows 7 64-bit because nothing worked out. I tried as you suggested but got the same pop up screen, unfortunately. Thanks anyway. -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hello Hendrik, Monday, January 18, 2010, 4:11:17 AM, you wrote: HO Remove the checkboxes for all the checking options (otherwise TheBat Done. Thanks! One doubt arises, however If I don't let those items checked how the effective protection will be performed using Kaspersky along TheBat! ? Thank you again for your time. -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Cesar Santos wrote on 19/01/2010 at 01:34:17 +1100 subject DLL AVV in (kav.bav) : Hello Hendrik, Monday, January 18, 2010, 4:11:17 AM, you wrote: HO Remove the checkboxes for all the checking options (otherwise TheBat Done. Thanks! One doubt arises, however If I don't let those items checked how the effective protection will be performed using Kaspersky along TheBat! ? Thank you again for your time. Normally, the Kasperky settings allow you to monitor the POP3/IMAP/SMTP port and will find malware during download. If this fails, it is not an harm. If you receive an infected .doc in your inbox, and if you try to open it, the .doc file will be written on the harddisk in your temporary folder. It is where the file antivirus monitor will intercept it. In short: Mail Antivirus is not really necesary . -- Sincerely Hendrik Oesterlin - email hendrikmail2...@yahoo.de TheBat! 4.2.18 Christmas Edition - Regula Anti-Spam Plugin 2.2.7.0 Extended Macro Plugin 1.1.91.0 - Windows XP 5.1 Build 2600 Service Pack 3 ___ Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
On Monday, January 18, 2010, 8:34:17 AM, Cesar Santos wrote: If I don't let those items checked how the effective protection will be performed using Kaspersky along TheBat! ? but you've gotten rid of the objectionable popup? -- Dwight A. Corrin 316.303.9385 phone ahead to fax dcorrin at fastmail.fm photo galleries at http://dcorrin.smugmug.com photo blog at http://dcorrin.aminus3.com http://photos.vfxy.com/photoblogs/5882 Using IMAP with The Bat! 4.2.19.4 ALPHA on Windows Vista version 6,0 (Service Pack 2) Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Hello Dwight, Monday, January 18, 2010, 12:41:29 PM, you wrote: DC but you've gotten rid of the objectionable popup? Yes. Sure. Thanks for asking me. -- Cheers, Cesarmailto:tij...@gmail.com Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: DLL AVV in (kav.bav)
Cesar Santos wrote on 18/01/2010 at 01:40:04 +1100 subject DLL AVV in (kav.bav) : Is there a way to inhibit this pop up message that is shown every time I load TheBat! (home user latest version) in Windows 7 x64? I think that it is related to my anti-virus Kaspersky 2010 release. To be complete you have to change the settings in both KAV and TheBat!: In KAV (note that mine Kaspersky is in German ): Right click on taskbar icon-Settings-eMail protection-Settings-Advanced-unchek the supplemental TheBat Plugin Just check SMTP/POP3/IMAP. In TheBat!: In main windows: Options-Preferences-Virus/Trojan Alert-Antivirus: Select Kaspersky Plugin and click delete Remove the checkboxes for all the checking options (otherwise TheBat will give you error messages while trying to analyze eMails and not finding the Kaspersky plugin). DLL AVV in (kav.bav) Thanks. You 're welcome! -- Sincerely Hendrik Oesterlin - email hendrikmail2...@yahoo.de TheBat! 4.2.18 Christmas Edition - Regula Anti-Spam Plugin 2.2.7.0 Extended Macro Plugin 1.1.91.0 - Windows XP 5.1 Build 2600 Service Pack 3 ___ Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de Current version is 4.2.12.4 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
