internetworkers AT lists.ibiblio.org
Subject: Internetworkers: http://www.ibiblio.org/internetworkers/
List archive
- From: Thomas <thomas AT tbeckett.com>
- To: "Internetworkers: http://www.ibiblio.org/internetworkers/" <internetworkers AT lists.ibiblio.org>
- Subject: Re: [internetworkers] desperately need virus help
- Date: Tue, 27 Apr 2004 12:24:05 -0400
Ron Thigpen wrote:
Are you sure that Netsky has infected you?
After hours working on this, I have concluded that it was not Netsky. Mainly for the reasons you outline below.
I don't believe Mozilla has
the flaw that this virus depends on for infection. You may well have a
saved mail message that contains the virus, but not been infected.
Norton is finding it in your mail file, not elsewhere, no?
Norton was also finding it in its own Application Data path. I just ran a chckdsk and, lo and behold, a file in that same path was corrupted.
Try to find other evidence that the virus was executed.
. . . . If these aren't present, chances are the virus never ran and your
symptoms are unrelated.
I could find no signs matching the Netsky profile.
There are other possible explanations for your symptoms.
Mozilla uses mail files w/o any extension to store the raw mail data. It
also generates a related mail summary file containing header/summary
data. These files have the same name as the mailbox file, but also have
a ".msf" extension. Under certain circumstances, these files can be lost
or corrupted.
I believe this was part of the problem, too. I opened Mozilla Mail and told it to compress the folders. The problem has not occured again.
600MB is a large mail file.
Take another look into "C:\Documents and Settings\T Beckett\Application
Data\Mozilla\Profiles\default\ag50m5dl.slt\Mail\". Is there an MSF file
present?
The .msf file was present, but I think the Inbox. file with no extension was corrupted somehow, or didn't match the .msf file.
And for performance' sake, you may want to come up
with some sort of mail archive scheme.
Oh, I have extensive archival folders. Need to do that more often, I suppose.
hth,
It did. Thanks, Ron
TaB
-
[internetworkers] desperately need virus help,
Thomas Beckett, 04/27/2004
- RE: [internetworkers] desperately need virus help, Kurt Schlatzer, 04/27/2004
-
Re: [internetworkers] desperately need virus help,
Ron Thigpen, 04/27/2004
- Re: [internetworkers] desperately need virus help, Thomas, 04/27/2004
- <Possible follow-up(s)>
- Re: [internetworkers] desperately need virus help, raustin3, 04/27/2004
Archive powered by MHonArc 2.6.24.