ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Email.phishing.pay-5
cov


Joined: 11 Feb 2006
Posts: 17
Reply with quote
Clamwin has found Email.Phishing.Pay-5 in my Thunderbird inbox.

I have a spamchecker switched on and there is no spam in my inbox and I delete any email I am not interested in pretty promptly.

I can find no suspicious emails in my Inbox.

Moreover, Clamwin has quarunteed my Inbox. I have since restored it but Thunderbird will not open
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
There is no reason to be concerned about the emails unless you actually did what the phishing email suggested...
did you restore all files that clmaiwn quarantined?
View user's profileSend private message
cov


Joined: 11 Feb 2006
Posts: 17
Reply with quote
Hell, it's caused chaos.

After the crash I couldn't get Thunderbird to start up without crashing. I reinstalled, tried to copy my files across, but I seem to have lost all my server settings.

These include POP accounts to which I can no longer remember user names and passwords, so that's it, I can no longer access those email accounts.

The thing is that there is no way there is an Email.Phishing.Pay-5 virus in my inbox.

So there's no way to remove it and the only way I can retain functionality in Thunderbird is to turn off quarantine in clamwin.

The other way, I guess would be to go back to using OUTLOOK EXPRESS. Would you recommend that?
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
cov wrote:
Hell, it's caused chaos.

After the crash I couldn't get Thunderbird to start up without crashing. I reinstalled, tried to copy my files across, but I seem to have lost all my server settings.

These include POP accounts to which I can no longer remember user names and passwords, so that's it, I can no longer access those email accounts.

The thing is that there is no way there is an Email.Phishing.Pay-5 virus in my inbox.

So there's no way to remove it and the only way I can retain functionality in Thunderbird is to turn off quarantine in clamwin.

The other way, I guess would be to go back to using OUTLOOK EXPRESS. Would you recommend that?


No, don't go back to OE it's much worse then TB. Just have clamwin reportiung the viruses and ignore the ones found in your inbox. It is the safest approach until we release version 1.
View user's profileSend private message
cov


Joined: 11 Feb 2006
Posts: 17
Reply with quote
Didn't think so Wink

I'm pretty sure that I don't have the virus in my mailbox, though.

I can't seem to find any referrence to the virus on the net, those that I have found being pretty vague.

As it comes (purportedly!) from a bank, I searched though my inbox for the string 'bank', but any such emails are legit.

Also a small Delphi programme that I have compiled into an exe is being picked up as "Trojan.Dropper.Exebundle.B".

Is it just me or are there a lot of spurrious alarm call from the recent dailies?
View user's profileSend private message
cov


Joined: 11 Feb 2006
Posts: 17
Reply with quote
This thing is really driving me round the bend.

I hate the damn thing coming up and telling me I have a virus.

You know and I know that my machine won't get infected from it, but I hate ignoring it day in and day out.

Is there not some way to tell where in the file the virus lives?

Could the developers look at this, do you think?
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
add you rtb profile dir to the exclusion list. Use regular expression to exclude the dir and all subdirs:
<c:\\folder\\.*> will exclude all subfolders and files under c:\folder
View user's profileSend private message
cov


Joined: 11 Feb 2006
Posts: 17
Reply with quote
Alch,

Well, actually, if I get a virus through email I want to know who sent it to me and which virus it was.

I think I'd rather see the incessant warnings than miss a virus.

Incidently, I don't believe that I thanked you for your assistance: Thank you!
View user's profileSend private message
Slug


Joined: 22 Mar 2006
Posts: 24
Reply with quote
After you delete your emails from your inbox have you compacted the folder "inbox" if not then the email is still there hence it keeps telling you your infected, as when thunderbird deletes the email it only get marked deleted, thats why if you look at the size of your inbox in windows explorer even though it says empty the file "inbox" is huge.

I currently have 10 emails in my inbox, I havent compacted for a while and it says the file "inbox" is 42 meg.

Hope I made sence

Michael
View user's profileSend private message
cov


Joined: 11 Feb 2006
Posts: 17
Reply with quote
Michael,

Yes, I know that now.

Since this disaster I have read up quite a bit on tbird and clamwin.

However, compacting the folders does not give me a clean Inbox.
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
clamav engine used in clamwin cannot identify an individual infected email in TB. Hopefully we will be able to do that with TB plugin currently in development.
View user's profileSend private message
cov


Joined: 11 Feb 2006
Posts: 17
Reply with quote
Great!

That would be extremely usefull
View user's profileSend private message
Email.phishing.pay-5
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic