Help - Search - Members - Calendar
Full Version: Bitdefender Internet Security V10 Virus In Outlook Express
BitDefender Forum > English > Old Forum Topics > Products > Workstation > Older BitDefender Products
dhillel
hello

i scanned my outlook express email folder with bitdefender internet security v10 and it found a virus in one of the messages. the problem is that all the log of bitdefender tells me is:

C:\Documents and Settings\COOLDAN\Local Settings\Application Data\Identities\{9771B15F-C962-4D29-B2A6-0C3505DD27B5}\Microsoft\Outlook Express\y1.dbx=>(message 917) Detected: Application.Joke.Hauntpc.B
C:\Documents and Settings\COOLDAN\Local Settings\Application Data\Identities\{9771B15F-C962-4D29-B2A6-0C3505DD27B5}\Microsoft\Outlook Express\y1.dbx=>(message 917) Disinfection failed

what would help me if someone can tell me how to find "message 917" in outlook, cause all i can see in outlook express folder is y1.dbx. how do i view it? do i have to count until i get to email number 917?
Cris
Hi dhillel,

Could you put y1.dbx into a zip archive, protected by the password infected and send me a PM with the archive attached? I'll look into it and tell you which email is infected.

Cris.
dhillel
QUOTE (Cris @ Sep 18 2007, 05:27 PM) *
Hi dhillel,

Could you put y1.dbx into a zip archive, protected by the password infected and send me a PM with the archive attached? I'll look into it and tell you which email is infected.

Cris.


i cant do that its not on my computer and it has my friend private emails on it.
it would help if you can tell me what method you will use to find this "message 917". thanx
Cris
Well, the method I use is kinda risky.

I can tell you that the infected email has an attachment (the virus is an attached file). So all emails without attachments are clean.
To find which attach is infected, open Outlook, go to that folder and try to save, one-by-one, the attachments. When BD reacts to one of them, you've found the culprit.

The virus that is contained is just a joke so, should you get infected, simply deleting the source file will clean the virus.

Anyway, if you cannot find the virus, you can trust me and send the file. I don't know you (nor your friend) and I don't care what emails he/she receives. I'm here just to help you get rid of the virus. smile.gif

Cris.
dhillel
QUOTE (Cris @ Sep 18 2007, 05:39 PM) *
Well, the method I use is kinda risky.

I can tell you that the infected email has an attachment (the virus is an attached file). So all emails without attachments are clean.
To find which attach is infected, open Outlook, go to that folder and try to save, one-by-one, the attachments. When BD reacts to one of them, you've found the culprit.

The virus that is contained is just a joke so, should you get infected, simply deleting the source file will clean the virus.

Anyway, if you cannot find the virus, you can trust me and send the file. I don't know you (nor your friend) and I don't care what emails he/she receives. I'm here just to help you get rid of the virus. smile.gif

Cris.


here is where it gets complicated...
on my other computer i got more viruses that are NOT a joke, bitdefender only tells me something like:
"message 1186". i need a way to understand excatly what message its referring to, if i have 3000 messages i wont start going one by one and saving attachments.
so if someone can tell me how to interpert bitdefender "message x" that would help a lot.
Cris
QUOTE (dhillel @ Sep 18 2007, 06:52 PM) *
here is where it gets complicated...
on my other computer i got more viruses that are NOT a joke, bitdefender only tells me something like:
"message 1186". i need a way to understand excatly what message its referring to, if i have 3000 messages i wont start going one by one and saving attachments.
so if someone can tell me how to interpert bitdefender "message x" that would help a lot.

The problem is even more complicated then you think.
message X is not BitDefender's way of interpreting the emails. This is the way dbx files were created by Microsoft. BitDefender just unpacks dbx files, scans the files inside, and shows the result. The files inside dbx files don't have names (they have numbers).

A simple way to find message X is to find an application that opens dbx files and shows the content by index (a.k.a message X). If you use TotalCommander, I know it has a plug-in for this kind of stuff (it's what I'm using).

Cris.
dhillel
QUOTE (Cris @ Sep 18 2007, 05:57 PM) *
The problem is even more complicated then you think.
message X is not BitDefender's way of interpreting the emails. This is the way dbx files were created by Microsoft. BitDefender just unpacks dbx files, scans the files inside, and shows the result. The files inside dbx files don't have names (they have numbers).

A simple way to find message X is to find an application that opens dbx files and shows the content by index (a.k.a message X). If you use TotalCommander, I know it has a plug-in for this kind of stuff (it's what I'm using).

Cris.


im using total commander ill try and find a plugin thanx
dhillel
QUOTE (Cris @ Sep 18 2007, 05:57 PM) *
The problem is even more complicated then you think.
message X is not BitDefender's way of interpreting the emails. This is the way dbx files were created by Microsoft. BitDefender just unpacks dbx files, scans the files inside, and shows the result. The files inside dbx files don't have names (they have numbers).

A simple way to find message X is to find an application that opens dbx files and shows the content by index (a.k.a message X). If you use TotalCommander, I know it has a plug-in for this kind of stuff (it's what I'm using).

Cris.


i got the plugin from total commander site and now i can view dbx files, cool!
now the files do have names, evrey message has a name of the subject of the email, but i tried to search for the subject of the joke virus "message 917" and i marked all files from that message to the first file in the folder based on the column "date". and it told me i have selected 917 files, so it is an improvment, but if there is an easier way to find "message 1168" for example i would like to know.
Cris
QUOTE (dhillel @ Sep 18 2007, 07:22 PM) *
i got the plugin from total commander site and now i can view dbx files, cool!
now the files do have names, evrey message has a name of the subject of the email, but i tried to search for the subject of the joke virus "message 917" and i marked all files from that message to the first file in the folder based on the column "date". and it told me i have selected 917 files, so it is an improvment, but if there is an easier way to find "message 1168" for example i would like to know.

I am still looking for a tool to show the messages' indexes. When I find one, I'll let you know.

But I'm running BD IS v10 and, when it finds a virus in a dbx file, it shows the message subject and date (which should be more then enough to find the message in just one step). I've attached a screenshot.

Cris.
dhillel
QUOTE (Cris @ Sep 18 2007, 08:17 PM) *
I am still looking for a tool to show the messages' indexes. When I find one, I'll let you know.

But I'm running BD IS v10 and, when it finds a virus in a dbx file, it shows the message subject and date (which should be more then enough to find the message in just one step). I've attached a screenshot.

Cris.


it only gave me one message subject and date and i found it easily, but then the other emails it gives me only "message x" and nothing after it, not even a date.
i tried using the total commander plugin, but it didnt go so well, when i delete a message i think is the right one, the next time i scan the folder it gives me "message x" with a diffrent number, it drives me crazy!!!
if you or anyone wont find an easier solution, i will have to delete all messages with attachments, and i might lose important information. anyway thanx in advance, you have been a great help so far!!!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.