Clamwin has found Email.Phishing.Pay-5 in my Thunderbird inbox.

I have a spamchecker switched on and there is no spam in my inbox and I delete any email I am not interested in pretty promptly.

I can find no suspicious emails in my Inbox.

Moreover, Clamwin has quarunteed my Inbox. I have since restored it but Thunderbird will not open

There is no reason to be concerned about the emails unless you actually did what the phishing email suggested...
did you restore all files that clmaiwn quarantined?

Hell, it's caused chaos.

After the crash I couldn't get Thunderbird to start up without crashing. I reinstalled, tried to copy my files across, but I seem to have lost all my server settings.

These include POP accounts to which I can no longer remember user names and passwords, so that's it, I can no longer access those email accounts.

The thing is that there is no way there is an Email.Phishing.Pay-5 virus in my inbox.

So there's no way to remove it and the only way I can retain functionality in Thunderbird is to turn off quarantine in clamwin.

The other way, I guess would be to go back to using OUTLOOK EXPRESS. Would you recommend that?

No, don't go back to OE it's much worse then TB. Just have clamwin reportiung the viruses and ignore the ones found in your inbox. It is the safest approach until we release version 1.

Didn't think so

I'm pretty sure that I don't have the virus in my mailbox, though.

I can't seem to find any referrence to the virus on the net, those that I have found being pretty vague.

As it comes (purportedly!) from a bank, I searched though my inbox for the string 'bank', but any such emails are legit.

Also a small Delphi programme that I have compiled into an exe is being picked up as "Trojan.Dropper.Exebundle.B".

Is it just me or are there a lot of spurrious alarm call from the recent dailies?

This thing is really driving me round the bend.

I hate the damn thing coming up and telling me I have a virus.

You know and I know that my machine won't get infected from it, but I hate ignoring it day in and day out.

Is there not some way to tell where in the file the virus lives?

Could the developers look at this, do you think?

add you rtb profile dir to the exclusion list. Use regular expression to exclude the dir and all subdirs:
<c:\\folder\\.*> will exclude all subfolders and files under c:\folder

Alch,

Well, actually, if I get a virus through email I want to know who sent it to me and which virus it was.

I think I'd rather see the incessant warnings than miss a virus.

Incidently, I don't believe that I thanked you for your assistance: Thank you!

After you delete your emails from your inbox have you compacted the folder "inbox" if not then the email is still there hence it keeps telling you your infected, as when thunderbird deletes the email it only get marked deleted, thats why if you look at the size of your inbox in windows explorer even though it says empty the file "inbox" is huge.

I currently have 10 emails in my inbox, I havent compacted for a while and it says the file "inbox" is 42 meg.

Hope I made sence

Michael

Michael,

Yes, I know that now.

Since this disaster I have read up quite a bit on tbird and clamwin.

However, compacting the folders does not give me a clean Inbox.

clamav engine used in clamwin cannot identify an individual infected email in TB. Hopefully we will be able to do that with TB plugin currently in development.

Great!

That would be extremely usefull