 |
 |
Further discussion with one of my staff reminded me that last week we ran into a different situation than what I described below, and which probably matches what's happening to you. When Eudora downloads messages from the server, it stores each message in "raw" form, complete with MIME encoding, in its temporary spool folder. After it has downloaded all of them, it starts processing them, putting the text in message form into your In box and writing attachments to your attachments folder. If you have anti-virus software, that software is watching all of this file creation activity and scanning for virus signatures. Normally NAV CE only recognizes virus signatures at the point in time when the attachment is decoded from the spool folder and written in its original format (.exe, .scr, .pif, etc.) into the attachments folder. For some reason in this particular case of Sobig.F, NAV CE is actually recognizing the virus signature when the raw message with the encoded attachment is written as a temp file to the spool folder. NAV CE quarantines the temp file, which thoroughly confuses Eudora and causes it to stop processing the mail. If you followed all that, you'll recognize that there are two ways around this. As you said, one is to delete the message from the server by logging on via the web. The other is to disable NAV CE's real-time scanning, download your mail, and then re-enable the real-time scanning. We tested both methods and they both work. The second one is somewhat risky of course; anyone who's going to do it had better both know exactly what they are doing and be extremely careful. At 08:40 AM 9/29/2003, Chris Wolf wrote: >This appears to be a bug in Eudora that causes it to crash when receiving >messages with malformed or non-standard headers. It happens not only with >the Sobig virus, but with certain other messages as well. What version of >Eudora are your users running? We have found that 5.2 and 6.0 are less >likely to have trouble with this, although I'm not sure they have >completely solved it. --Chris ============================================== Chris Wolf Computer Service Manager Agricultural Economics [log in to unmask] Michigan State University 517 353-5017