Hi List,

I am following up on an old threat, because the mystery of the
disappearing mails (who message.tbb file) has just been solved. It is
*not* a TB bug.

Fullquote to follow (to remind everybody of the problem), and after
that the explanation why the folder disppeared, and how to make it
re-appear.

On Tue, 26 Jun 2001 11:28:30 +0800GMT (26/06/2001, 11:28 +0800GMT),
Thomas F wrote:

TF> Hi David,

TF> On Mon, 25 Jun 2001 14:22:50 -0400GMT (26/06/2001, 02:22 +0800GMT),
TF> David Robert Austen wrote:

DRA>> Everything in my BAT InBox has disappeared again (except very latest
DRA>> download).

TF> Same here. Not the Inbox, but one of my folders. The file messages.tbb
TF> has vanished. The file messages.tbi told me that there were 5 news
TF> messages in there. That was last Thursday. I hadn't done any compress
TF> or purge action.

TF> Today, upon startup, same folder, new problem: both files (*.tbb and
TF> *.tbi) gone.

TF> I have now deleted the folder, and created a new one. Weird it is
TF> indeed. See my version in the sig; stand-alone. Never had this problem
TF> before. Happened only with one folder out of 22 in one of my 8
TF> accounts, so I didn't report it as a bug. Let's see whether it happens
TF> again tomorrow morning, after I have now re-created the folder.

And this is the explanation: I save attachments in message body. One of
these attachments contained a virus. At the time I received the email
with the attachment (embedded in a legitimate .doc file), this virus
was not known to PC-Cillin, so it got saved to disk. (I apparently
didn't read the Word file ... ;-))

Now, after update of PC-Cillin, the real-time scan will detect this
virus in the file messages.tbb and of course quarantine the whole file
- put the complete folder's message base under arrest. The file
message.tbb is quarantined, and TB has no access any more.

How to get it back:

1.) After closing TB, restore the file messages.tbb from "quarantined"
to normal status from within PC-Cillin. It will be put back right
where it belonged, but with and including the virus.

2.) Shut off PC-Cillin. This is to avoid PC-Cillin quarantining the
file again while you at it in the following steps.

3.) Open TB, mark all messages (by way of context menu) and export
them as *.msg files. In my case, I had 1376 individual *.msg files in
my Windows\tmp directory now.

4.) Open PC-Cillin, scan the tmp directory. The email with the virus
will be indified (virus detected in file 0000128.msg) - and
quarantined.

5.) Restore the quarantined file right away.

6.) Open the file in a text viewer. (You cannot do that if you don't
resotre it.) Print the headers out, as these give you the means to
identify the message from within TB.

7.) Shut down PC-Cillin.

8.) Open TB, delete the email which you have identified with the
headers, and compress the folder (so that it is really deleted).

9.) Delete the *.msg file in the tmp directory, so that the virus is
off your computer.

10.) Restart PC-Cillin. Run a virus check. Everything is fine now. The
folder does not contain the offending virus any more and will not be
quarantined any more.

-- 

Cheers,
Thomas.

Moderator der deutschen The Bat! Beginner Liste. Anmeldung unter:
[EMAIL PROTECTED]  

Message reply created with The Bat! 1.53d
under Chinese Windows 98 4.10 Build 1998  
on a Pentium II/350 MHz.


-- 
______________________________________________________
Archives   : <http://tbudl.thebat.dutaint.com>
Moderators : <mailto:[EMAIL PROTECTED]>
TBTech List: <mailto:[EMAIL PROTECTED]>
Unsubscribe: <mailto:[EMAIL PROTECTED]>

You are subscribed as : archive@jab.org


Reply via email to