2 new viruses

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hi Kaspersky has found two viruses on my pc called
"trojan-spy.html.paylap.et" and
"trojan-spy.html.bayfraud.ew".  I can find no information on what these two
viruses actually do!  They surposedly came from a very well known source
back in April.  Does anyone know what these two viruses can do?  Is it
possible that someone else sent me the viruses and they have been clever
enough to make these viruses look as if they have came from a well know
source, in other words to disguice where they really came from?  I have not
deleted these viruses from my machine yet because i would like to find out
more about them before i take any action.

Any feedback will be much appreciated.

Thank you,


Re: 2 new viruses

Quoted text here. Click to load it

These non-viruses attempt to trick the user into divulging their
"PayPal" and "eBay" account information to untrusted website forms by
appearing as trusted webforms. They send them out like spam and wait for
someone to 'bite' like they are fishing or trawling - the term for these
are "phishing" attempts and should be reported to the affected

Quoted text here. Click to load it

Commendable, but I believe they can be safely deleted.

Re: 2 new viruses

Thankyou for the reply .. it was actually "paypal" or supposedly paypal who
was the well known source.  I am surprised that only Kasperskey was able to
detect them after I had performed a very in depth scan.  It appears that
they have been on my system since 9th April.  If I just delete the email I
assume this will get rid of it.

Thanx again for the info.
Quoted text here. Click to load it

Re: 2 new viruses

On Tue, 06 Sep 2005 15:17:19 GMT, "Chris"

Quoted text here. Click to load it

You can get an idea of what the paylap one is probably about here:


and perhaps here:


I suspect bayfraud is associated with the bogus ebay web site:


I'm only familiar with the email spreading form of this where users
are enticed to Run a email attackment because the message says
to "read it" (run it) for details of why your ebay account is

Hope this sleuth work helps a little. If you're wondering if KAV is
false alarming, I rather doubt it. It's possible that other av are
detecting what you have, so out of curiosity you could upload
suspect files to Virus Total:


If you're extremely lucky you might find a av there that detects
and provides you with a malware name for which you can Google
a description.

It's also possible that some spyware scanner will not only detect
but clean. Does KAV offer to clean or just delete files or what?

Maybe the files are just in some temp folder and you're not



Re: 2 new viruses

IE 7.0 (beta) - which only runs on XP or the Vista beta - exposes these urls
as phishing sites (instead of opening the site, it goes to a warning page).
Seems a pretty-good step forward security-wise.


Re: 2 new viruses

Quoted text here. Click to load it

Damn it Shane, we're here to DISCREDIT ms, not credit it.  :-)
Watch your mouth.

Re: 2 new viruses

Buffalo wrote:
Quoted text here. Click to load it

Sorry! Consider me suitably chastised <g>

I'll try not to do it again!


Re: 2 new viruses

Quoted text here. Click to load it
Do you have the URL where I can get the IE7.0 Beta?



Re: 2 new viruses

Sorry Marie,
IE 7 Beta 1 is not available except to developers, MSDN subscribers and a
few pre-registered beta testers.



Marie Brown wrote:
Quoted text here. Click to load it

Site Timeline