Skip to Content.
Sympa Menu

internetworkers - Re: [internetworkers] desperately need virus help

internetworkers AT lists.ibiblio.org

Subject: Internetworkers: http://www.ibiblio.org/internetworkers/

List archive

Chronological Thread  
  • From: Thomas <thomas AT tbeckett.com>
  • To: "Internetworkers: http://www.ibiblio.org/internetworkers/" <internetworkers AT lists.ibiblio.org>
  • Subject: Re: [internetworkers] desperately need virus help
  • Date: Tue, 27 Apr 2004 12:24:05 -0400

Ron Thigpen wrote:
Are you sure that Netsky has infected you?

After hours working on this, I have concluded that it was not Netsky. Mainly for the reasons you outline below.

I don't believe Mozilla has
the flaw that this virus depends on for infection. You may well have a
saved mail message that contains the virus, but not been infected.
Norton is finding it in your mail file, not elsewhere, no?

Norton was also finding it in its own Application Data path. I just ran a chckdsk and, lo and behold, a file in that same path was corrupted.

Try to find other evidence that the virus was executed.
. . . . If these aren't present, chances are the virus never ran and your
symptoms are unrelated.

I could find no signs matching the Netsky profile.

There are other possible explanations for your symptoms.

Mozilla uses mail files w/o any extension to store the raw mail data. It
also generates a related mail summary file containing header/summary
data. These files have the same name as the mailbox file, but also have
a ".msf" extension. Under certain circumstances, these files can be lost
or corrupted.

I believe this was part of the problem, too. I opened Mozilla Mail and told it to compress the folders. The problem has not occured again.

600MB is a large mail file.

Take another look into "C:\Documents and Settings\T Beckett\Application
Data\Mozilla\Profiles\default\ag50m5dl.slt\Mail\". Is there an MSF file
present?

The .msf file was present, but I think the Inbox. file with no extension was corrupted somehow, or didn't match the .msf file.

And for performance' sake, you may want to come up
with some sort of mail archive scheme.

Oh, I have extensive archival folders. Need to do that more often, I suppose.

hth,

It did. Thanks, Ron

TaB




Archive powered by MHonArc 2.6.24.

Top of Page