This thread was archived. Please ask a new question if you need help.
Thunderbird trojan viruses on incoming emails
I am getting emails every day from "get rich"or "bitcoin"etc. I can't open them to get the address. They are bringing in Trojan viruses. My antivirus programme (Microsofr Defender) picks them up and removes or quarantines same. but not before the contents of all other emails have disappeared. In other words the headings are there but no content , also attachments are all also not able to be opened. At first I created filters to have the message deleted from my computer and from the server. This seemed to make no difference. Now I cannot open the virus containing emails to get an address to create a filter. I contacted my service provider who says they cannot help me. Someone PLEASE HELP!
All Replies (3)
Believe it or not your anti virus is the problem here. My guess is it is deleting the whole mail file the folders contents are stored in.
My suggestion is to disable any scanning of the Thunderbird profile folder https://support.mozilla.org/en-US/kb/profiles-where-thunderbird-stores-user-data
When an email travels, and even when it displays in Thunderbird no script or attachment with the email are run. Any executable attachment are also converted to text for transmission as an email and stored by Thunderbird as such. So not having scanning before you see it is not much of a risk. Even if you know the mail contains a trojan. Just do not open the attachments. (even if you do defender should kill them as soon as Thunderbird writes the recompiled attachment to the windows temp file to open it. So again there is a safety other than just "don't open them)
Whoever you are thank you very much, Matt. I am so impressed that people like you take the time to help someone like me. Early days but I am now seeing all incoming emails and attachments from regular sources. All the "get rich"emails have stopped coming in - and I was getting few every day - so don't know what that means. I can't see the connection with the action I took, unless the filters I created are now "working". Will see what happens over the coming week. Once again many thanks.
If you get bad email, do not bother opening, just delete it and then compact the folder to fully remove it. To compact folder: right click on folder and select 'Compact'.
But ideally they should be going to your Junk/Spam folder. Have you set up and trained Junk ? If no or not sure then I suggest you take a look at the info. https://support.mozilla.org/en-US/kb/thunderbird-and-junk-spam-messages
Then when you get Junk, mark it as Junk and after a while Thunderbird learns and those emails should get filtered correctly. then you can empty the Junk folder periodically and compact the folder.
In the example image below I have selected some of my address books to act like a whitelist.
You can set it up to auto delete the junk, but I do not because sometimes the odd good email gets into that Junk folder and I will want to rescue it by marking as 'Not junk'. At the end of each day, I have a routine where I check the Junk folder, move anything I need, Empty folder and then compact it to fully remove emails and gain space.