Hello Vili,

Monday, September 05, 2005, 19:38:50, you wrote:

>>> [*] Changed the algorithm of checking incoming messages for viruses
>>> to prevent conflicts with resident file monitors.

>>Could  we  get some more info on this? To beta test something, we need
>>to know, how it works to better catch possible bugs.

The essence of this change is that now antivirus monitor won't block receiving 
of POP3 messages if you have antivirus plugin installed. The monitor and the 
plugin will be able to co-exist, you won't be forced to turn off the monitor.

The Bat! when recieving files via POP3 did store them to TMP directory and then 
did import them to the message base. 

The method of storing files to TMP did allow resident file monitors to locate 
viruses in these TMP files before they go to the message base. This prevents 
the monitor to lock the message base. But this also might stall the process of 
receiving messages.

The Bat! did create a TMP file, wrote contents to it, closed the file, and then 
opened it again and passed the contents to the antivirus plugin. Now it doesn't 
close the file, and passes the file contents to the plugin while the file is 
open. 

Kaspersky antivirus monitor doesn't check the file contents until the file is 
closed. So passing the file contents to the antivirus plugin does prevent the 
monitor from scanning the file and interrupting the mail process. This 
technique may work not only with Kaspersky but with other antivirus as well.




-- 
Best regards,
Maxim Masiutin                            mailto:[EMAIL PROTECTED]


________________________________________________________
 Current beta is 3.61.03 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/

Reply via email to