Plugin for the bat stops working?!

I just noticed that my incoming mail is not checked for virusses any more. The Bat! log gives the next error:

!1-2-2004, 18:41:28: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.

1-2-2004, 18:41:28: FETCH - bericht opgehaald van email@provider.domain (2097b)

Translated it says: The anti-virus program has reported an error, the object can not be checked for virusses.

When I try to save the attachment (EICARS test virus) The plugin does block that activity, so it’s just incoming mail.

The Bat! 2.0.3 beta 51
avast! Antivirus 4.1.342
Virus bibliotheek (VPS): 0401-8 (29.01.2004)
avast! (c) Copyright 1988-2004 ALWIL Software

Please advice.

Peter

So you’re getting such a line in the log for each inbound message?
(so you’ve got plenty of them in the log)?

Does a reboot of the machine help?

Thanks
Vlk

I get the line just for messages with attachments. I am at work now, Iwill check if it still does not work after a reboot. I am pretty sure it does not, but I will check to make sure.

Peter

Mmm, by now it gives the error woth more messages. It skips one now and then… That might be plain text, if the plugin sees html formatted messages as “with attachment” also… Anyway, after starting my pc again, the problem stil resides. Here is a bigger part of the log…

2-2-2004, 20:29:07: FETCH - bericht opgehaald van tbmail@ac-martin.com (5179b) (verwerkt door “The Bat! - TBBETA mailing list”, verplaatst naar “Inbox\computers\email\The Bat! - Ritlabs\TBBETA mailing list”)
!2-2-2004, 20:29:25: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.
2-2-2004, 20:29:25: FETCH - bericht opgehaald van intercron@miportal.es (2963b)
!2-2-2004, 20:29:45: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.
2-2-2004, 20:29:45: FETCH - bericht opgehaald van wpxqn@aol.com (5493b) (verwerkt door “SPAM”, verplaatst naar “\$JUNK$”)
2-2-2004, 20:29:45: FETCH - bericht opgehaald van mau@Rancho-K.com (3654b) (verwerkt door “The Bat! - TBBETA mailing list”, verplaatst naar “Inbox\computers\email\The Bat! - Ritlabs\TBBETA mailing list”)
!2-2-2004, 20:30:16: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.
2-2-2004, 20:30:16: FETCH - bericht opgehaald van Candidauf@incluudes.com (3342b) (verwerkt door “SPAM”, verplaatst naar “\$JUNK$”)
!2-2-2004, 20:30:35: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.
2-2-2004, 20:30:35: FETCH - bericht opgehaald van jim@thecichlidstore.com (34484b)
!2-2-2004, 20:30:54: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.
2-2-2004, 20:30:54: FETCH - bericht opgehaald van qjolqc@msn.com (5351b) (verwerkt door “SPAM”, verplaatst naar “\$JUNK$”)
2-2-2004, 20:30:54: FETCH - bericht opgehaald van GHEABEWGRW@msn.com (2292b) (verwerkt door “SPAM”, verplaatst naar “\$JUNK$”)
!2-2-2004, 20:31:19: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.
2-2-2004, 20:31:19: FETCH - bericht opgehaald van dacclosers@rock.com (2108b) (verwerkt door “SPAM”, verplaatst naar “\$JUNK$”)
!2-2-2004, 20:31:36: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.
2-2-2004, 20:31:36: FETCH - bericht opgehaald van kmdurham_jd@cc.jyu.fi (1970b) (verwerkt door “SPAM”, verplaatst naar “\$JUNK$”)
2-2-2004, 20:31:36: FETCH - bericht opgehaald van notice@cichlid-forum.com (2160b) (verwerkt door “Cichlid forum”, verplaatst naar “Inbox\aquarium\cichlid-forum”)
!2-2-2004, 20:32:01: ANTIVIRUS - Het anti-virusprogramma heeft een fout gemeld, het object kan niet op virussen worden gecontroleerd.
2-2-2004, 20:32:01: FETCH - bericht opgehaald van dana.simscr@reg.fi (2259b) (verwerkt door “SPAM”, verplaatst naar “\$JUNK$”)

Peter

When trying to send the eicars test file, I get a popup with the same error. This is starting to get a bit urgent…

Peter

some more backgrond. Windows XP home.
Before the problem cam up, I upgraded the bat! to a higher beta. I upgraded kerio to version 4 and there was an upgrade of avast. I tried an older version of the bat!, uninstalled kerio (so no firewall anymore), but the problem stays.

Peter

Hi, enable logging in avast! plugin, reproduce the problem and then send the log file to sedina@asw.cz. I will check where is the problem. The log you inserted here is from The Bat!, but I need to verify the plugin log. thanks! pavels

Hi pavels,

The plugin log just states that the plugin is loaded and when I exit the bat it will state it is unloaded. It does not display anything about the errors that occur. When I try to save an attachment, the plugin will block it and display some lines about that, but nothing while downloading mail. I don’t think sending the log will do ou any good, but I will have a go at it tonight.

Peter

The log is on its way…

Peter

Just got back from my holiday… Anything on this problem yet??

Peter

TheBat! 2.04.4 (latest release) works just fine with latest avast! 4.1.342

I would suggest to upgrade your email client.

Christopher

Well, it used to work with older bat versions, and i am now at the latest release candidate 2.04.3 I also removed and reinstalled the plugin, but still it does not work.

Peter

Hi, I have tested it now (with 2.04.4) and everything is OK on my computer. Log you sent me indicates that plugin scanned some file. Some questions:

  1. which status avast! plugin shows?
  2. in Bat! directory please check that file avconfig.ini contains something like this:
    [Checkers]
    Count=1
    Checker #1=TAVDLLPlugin.C:\Program Files\The Bat!\MAIL\AvBatEx.bav
    (or you can send me that file, and I will check it)
  3. not all all virus actions in Bat! program interact with you. e.g. if Bat! is configured to move infected email into quarantine, this action is performed without any message in the screen.
  4. if you have some bigger avbatex.log file, please send it to me.

thanks!
pavels

“OK”

There is:
[Checkers]
Count=1
Checker #1=TAVDLLPlugin.C:\Documents and Settings\Peter\Mijn documenten\E-mail\The Bat!\mail\AvBatEx.bav

I realise that, but in the logfile of the bat! for every attachment to check the error occurs, and the avast log does not show anything. When I try to save the attachment, everything works fine, the operation gets blocked and the log shows the infection.

I will collect some mail and create a bigger log. When I have that, I will send it.

Thanks, Peter

Hi peter, I will wait for log, but I don’t undestand what can be wrong… thanks! pavels

Hi Pavel,

I just sent new logs. The account log from The Bat! and the AvBatEx.log file from the last couple of days. The parts where files do get scanned are from saving attachments, not from receiving them.

Is there any software that can monitor what is happening when The Bat! calls the plugin???

I am going to quit using the plugin and start using the internet mail provider again… I really hope you guys can find the problem.

Peter

PROBLEM SOLVED!!!

Thanks to debugging versions of the plugin, Pavel supplied, we found out that The Bat! for some ideotic reason left over 38000 (Thirty-eight-thousand) temp files in the temp directory. 0 bytes big, so no overhead there, but the plugin could not find any nonexisting temp file names to create…

After deleting all those files, everything got back to normal again.

Thanks Pavel! (And all the other guys involved off-course)

Peter

Well the question is whether these files were actually not created by the plugin itself (let’s hope that not).

It could be. The plugin gives the error not beeing able to create, so… I sent Pavel the latest logs, so he can have a look at it.

If I can do anything to help you guys find out anymore, let me know.

Peter

Just keep monitoring the temp folder. It would be interesting to know whether the files are created by the avast plugin or not.

Thanks for your help.
Vlk