PHISH/Paylapfraud.C virus

[Dave Lambert]

PHISH/Paylapfraud.C virus

Has anyone run into this "PLISH" ?
The following is reported when after running AntiVir Personal
Edition Version 6 <http://www.antivir-pe.com> :

C:\Documents and Settings\HP_Owner\Application
Data\Thunderbird\Profiles \jhk98uy6.default\Mail\Local Folders
Drafts
[DETECTION] Contains signature of the PHISH/Paylapfraud.C virus
This file is a mailbox. To avoid damaging on your emails this
file will
not be repaired or deleted!
Sent
[DETECTION] Contains signature of the PHISH/Paylapfraud.C virus
This file is a mailbox. To avoid damaging on your emails this
file will
not be repaired or deleted!

It doesn't "seem" to be causing any problems in Thunderbird...
but bugs
me

Perhaps this is a "false positive" ? Should I try simply
deleting the two mailboxes and then re-creating them?
NOD32 does not detect the PLISH.
Am running WinXP Home on hp pavilion a810n.

Many Thanks,
R. Dave Lambert
davelamb_AT_HotPOP_DOT_com

 

[David H. Lipman]

From: "Dave Lambert" <[email protected]>

| PHISH/Paylapfraud.C virus
|
| Has anyone run into this "PLISH" ?
| The following is reported when after running AntiVir Personal
| Edition Version 6 <http://www.antivir-pe.com> :
|
| C:\Documents and Settings\HP_Owner\Application
| Data\Thunderbird\Profiles \jhk98uy6.default\Mail\Local Folders
| Drafts
| [DETECTION] Contains signature of the PHISH/Paylapfraud.C virus
| This file is a mailbox. To avoid damaging on your emails this
| file will
| not be repaired or deleted!
| Sent
| [DETECTION] Contains signature of the PHISH/Paylapfraud.C virus
| This file is a mailbox. To avoid damaging on your emails this
| file will
| not be repaired or deleted!
|
| It doesn't "seem" to be causing any problems in Thunderbird...
| but bugs
| me
|
| Perhaps this is a "false positive" ? Should I try simply
| deleting the two mailboxes and then re-creating them?
| NOD32 does not detect the PLISH.
| Am running WinXP Home on hp pavilion a810n.
|
| Many Thanks,
| R. Dave Lambert
| davelamb_AT_HotPOP_DOT_com

It's not a virus. It is a detection for Phishing email. There is no attachment and thus no
real payload. The payload-like function is to fool you into thinking it is legitmate email,
and get you to go to some web site and enter an account and password. That information
would then be used to steal from you using your account information provided.

 

[Adam Piggott]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

PHISH/Paylapfraud.C virus

Has anyone run into this "PLISH" ?
The following is reported when after running AntiVir Personal
Edition Version 6 <http://www.antivir-pe.com> :

C:\Documents and Settings\HP_Owner\Application
Data\Thunderbird\Profiles \jhk98uy6.default\Mail\Local Folders
Drafts
[DETECTION] Contains signature of the PHISH/Paylapfraud.C virus
This file is a mailbox. To avoid damaging on your emails this
file will
not be repaired or deleted!
Sent
[DETECTION] Contains signature of the PHISH/Paylapfraud.C virus
This file is a mailbox. To avoid damaging on your emails this
file will
not be repaired or deleted!

Interesting! Have you got many emails in your Drafts folder? Assuming not
you could try to move emails out of the folder, compacting it and then
re-scanning until you can find which email is causing the problem and
report it to Esat.

You should backup the Drafts folder in case it's a deleted email that is
causing it, as compacting will remove any deleted email and mean the false
positive might disappear.

Let us know how you get on!
- --
Adam Piggott, Proprietor, Proactive Services (Computing).
http://www.proactiveservices.co.uk/

Please replace dot invalid with dot uk to email me.
Apply personally for PGP public key.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (MingW32)

iD8DBQFDPl9F7uRVdtPsXDkRAkf2AJ0a4oUjU6BdAD6pVce9f7Z70AW12gCgo5CI
Bhkmlf/jrtVE1pxW0Wjs5iw=
=0mzk
-----END PGP SIGNATURE-----