Hello William,

On Thu, 13 Mar 2003 17:29:08 +0000 GMT (14/03/03, 00:29 +0700 GMT),
William Moore wrote:

TF>> There is supposed to be a quarantine folder within TB from which you
TF>> can handle virus-infected mails.

> I don't want to handle infected mails. I just delete them.

That's OK. But read on to my last paragraphs.

TF>> Also, when you download infected mails, the download will continue
TF>> and not stop with the infected mail.

> I must admit that I've never noticed this behaviour with NOD32. It's so
> rare for me to receive an infected email (according to NOD ;-) that this
> has not been apparent. It isn't a problem for me anyway. Downloading with
> TB/Broadband is very fast.

This has nothing to do with broadband. What happened with me with
PC-Cillin is that if TB is trying to download an infected mail, PCC
will not allow TB to write it to temp. PCC will quarantine the mail
(batxxxx.tmp file) right there, and TB reports an error: could not
import message. Each time TB checks for mail, the same thing will
happen with the same mail, until you connect to your server with the
Despatcher and delete the mail from server.

With the plug-in, the mail will be downaloded alright, and then
quarantined (or deleted, depending on your settings) from within TB.
No error messages, just a pop-up warning (unless you told NOD32 to
stay quiet). This for me is a good reason to try the plug-in.

TF>> Also, if you do have an infected in the database already, the AV will
TF>> not quarantine the whole message base but only move the infected
TF>> message to the quarantine folder within TB.

> This doesn't arise. I get an infected mail, I delete it.

Well. If you know about it. What happens sometimes is that you receive
an infected mail, but your AV program didn't catch it, or your AV
program was turned off when the mail came in. Anyway, let's say it's
in the message base (with attachments kept in message body), but you
wouldn't know about it. You update your AV program, try to access your
folder and plop - it's gone. The whole folder. If you are smart, it's
in the AV prog's quarantine folder, but if you delete any infected
files, it's gone forever. *All* messages in the folder, mind you. This
situation happened to me before, and luckily, I found my messages.tbb
file in PCC's quarantine folder and could disect it and delete the
virus mail.

That's the reason I don't let any AV software delete files. "Clean" if
possible, "quarantine" if not.

-- 

Cheers,
Thomas.

Moderator der deutschen The Bat! Beginner Liste.

I know you think you understood what I said, but what you heard was
not what I meant.

Message reply created with The Bat! 1.63 Beta/5
under Chinese Windows 98 4.10 Build 2222 A 
using an AMD Athlon K7 1.2GHz, 128MB RAM


________________________________________________
Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to