E-mail error message

Have you found an answer? Can you provide a screenshot?

Does this article help?

The thread provides instructions on how to remove the virus.

https://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning-windows_10/571-571-message-contains-spam-or-virus-or-sender/055d785c-a369-4c9e-95fe-cebc07d45282?auth=1

The Microsoft article identifies the problem as HackTool:Win32/Gendows.

I have done full scans with Zone Alarm Extreme Security and MalwareBytes Pro and neither has found it and I know both scanned my mail folder.

It happens when I reply to, or forward, an email from one particular correspondent.

The problem appears to be connected with a logo as part of the sender's signature. If I delete the signature, including the logo, the problem disappears.

This doesn't occur with other senders' signatures, with or without a logo.

I haven't come across a graphic transmitting malware before.

Does the logo open a web page upon click? If so, it could be a blacklisted IP. Hope this helps.

The link below describes a similar situation. I'll give it more thought and respond if I come up with anything.

Also, bit defender has a highly rated free antivirus. If you'd like to try a third source.

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_outlook-mso_windows8-mso_2010/571-571-sendreceive-error/303b3035-6438-4cb0-af8c-360e219f9d82

Hi Joshua The logo is that of the Royal British Legion, a major UK charity, and which has recently been the subject of complete rebranding. Therefore the logo in the signature must have recently been added. Clicking on the logo does nothing, and copying, even 'though the logo is selected. does nothing. So I can't get at it to do any investigation. Snip attached.

Given it is your mail provider that is claiming the message contains a virus perhaps ask them to explain it. You anti virus is detecting nothing, and theirs is probably hounding you with a false positive.

All x.x.x numbered responses come from the SMTP server and are simply reported verbatim by Thunderbird.

You do not identify your mail provider, so what has gone on here is really just guess work. For example if you use an exchange server that message may actually relate to local policies on the exchange server relating to corporate policies.

Matt

I am aware that the message came from the mail server. My mail provider is Hover (Tucows).

My options in Tbird include "Allow anti-virus clients to quarantine individual incoming messages".

I am running both Zone Alarm and Malwarebytes but Tbird does not appear to recognise them. There is insufficient information about what this option actually means.