I always get: "newmsg Trojan:WIN/SuspiciousAttachmentScript.a"
I always get: "newmsg Trojan:WIN/SuspiciousAttachmentScript.a" and "C:\Users\newb\AppData\Local\Temp Trojan:WIN/SuspiciousAttachmentScript.a" from Mcafee when I open Thunderbird. I'm only getting this in Thunderbird and suspect it's a false positive of some kind. It's still worrying and I'd like to eliminate this. This has been going on for a couple of months. I've run several cleaners and anti-virus programs on the system, but it still returns.
thanks
Alle svar (1)
Hi
Thunderbird temporarily extracts email attachments or scripts to your Windows AppData\Local\Temp folder and McAfee is watching that Temp folder and deletes that temporary file.
Do because the original email is still sitting in your Thunderbird inbox, the next time you open Thunderbird, it tries to sync and cache that email again and McAfee flags it again.
So you need to find that email end delete it from your Inbox/Junk/Spam folder
To find the exact email causing the issue, look at the McAfee history log, it might give you a specific file name.