Hello Sebastian, On 8 Dec 2001 at 14:44:33 you wrote (at least in part):
S> I turned the tool off, killed both the program itself-process, as well S> as the agent process. S> Then I hit the "check mail for all" button but nothing came - am I S> doing something wrong? Have you tried the mail dispatcher? If so and there are no mail left on server you'l.l have to locate the offending mail in your mailbase. This can be done as follows: - Open up the search dialogue. - Check "Look in": "All Accounts" - "Search for": "Re:" - Tab "Advanced" - "Message has attachments" - "Size is LARGER than": "30" K bytes - "Size is SMALLER than": "50" K bytes - Start searching. This may find some more messages than the virus containing, but I'm quite sure the one you need to find will be found too as the virus every time creates a mail starting with 'Re:' in subject and as itself is 29KByte sized the mail will at least have a size between 30 & 50 KBytes. Now go through the search result list and look for mails with a two files attached. One is called 'message.htm' (that's not a real attachment, but it looks like one) and the other is named with a double extension. It ends with '.doc.pif', '.doc.scr', '.mp3.pif', '.mp3.scr' and maybe one or two additional endings may be possible (I can't recall them all right now). If you found a mail that could contain the virus try to save the attachment. Scan the saved file with NAV. If NAV alerts you when you try this you've found _one_ :-) Tell NAV what ever you want, let it delete the file. Delete the message. Go on looking for other mails maybe containing this virus. Do the same 'Save', 'Check', 'Delete mail if positive' procedure until you're done through all found mails. Close the search window. Go through all 'Trash' folders, clear them (or if there are mail in some Trash-folders you want to keep delete only the mails you already deleted in normal message list within the search window). After you've done with all Trash-folders use menu 'Folder', entry 'Compress all folders'. Now the mails are _really_ deleted, even from message data base and you can fire up your NAV-Agent again. It should not alert you about any virus in a .tmp file anymore (at least until you receive the next one *g*) S> Please let me know, S> thank you very much, Hope this helps Pit -- Regards Peter Palmreuther mailto:[EMAIL PROTECTED] (The Bat! v1.54 Beta/14 on Windows NT 5.0 Build 2195 Service Pack 1) The Rule of Fives states that all things happen in fives, or are divisible by or are multiples of five, or are somehow directly or indirectly related to a five. -- ________________________________________________________ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d FAQ : http://faq.thebat.dutaint.com
