All Products Community Forum

Hi, I just noticed that my computer has been infected by a trojan called "HEUR:Trojan.VBS.SAgent.gen", and I can't remove it via Kapersky...The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code). Kapersky stated that these two files are the source of the Trojan (they are not found as an e-mail attachment in my inbox, it's all code in the inbox file in Thunderbird):

P000009384:Emirates_Marble-pdf.gz and P000009384:Emirates_Marble-pdf.vbs

So I'm simply wondering how I should go about to remove this trojan from my computer?

Source: https://threats.kaspersky.com/en/threat/HEUR:Trojan.VBS.SAgent.gen/

I keep getting blocked threats and my email will not download because Thunderbird is blocking the threat. I deleted all emails that came in prior to the problem. not sure how to find the bad email

Even though I have created a main password I find that I suddenly I can open the application and view accounts and even security info, without putting it in anyway.

Dear all,

I would like to use Thunderbird on a shared computer at my universitys lab space (it is mainly my PC but other people have access and use it sometimes). However, as we are requested to keep mails confidential I thought it would be as easy as just setting a primary password and thunderbird would not start if that password is not set. However, that proofed to be a wrong assumption. Instead if I just cancel the dialog it will open and still display all the locally stored mails.

We are using IMAP server and I already set up that the mails are not stored locally. Still, some mails that I have used recently are visible. I am aware that there would anyway be the local copy in the profile folder but I guess none of the people sharing that computer would take the efford to check that, so I would be fine if I could simply prevent thunderbird from starting without the primary password.

Is there any option for that or any extention that would do so?

Thank you in advance! Juergen

Someone has created Mozilla accounts using several of my company's openly available email accounts. I can't figure why. Anyone have an idea why? I know this because all three accounts received the following email message from Mozilla: "Welcome to Mozilla! A few days ago you created a Mozilla account, but never confirmed it. Please confirm your account in the next 15 days or it will be automatically deleted. Don’t miss out on the browser that puts you and your privacy first."

Moderator note: This question has been edited to remove extra newlines.

I received an email from breach-alerts@mozilla.com informing me that Mozilla Monitor⁩ discovered a data breach that includes my personal information: Unfortunately, I don't know if this is a legitimate email from Mozilla. Can anyone confirm if it is or is not?

Thanks

Today is 01.16.2026 Hi Volunteers, thank you for the service you are providing Thunderbird users.

I didn't see a topic called Security, so I chose Settings.

For Thunderbird version 146, what specific version of LDAP is being used?

Regarding which LDAP version is the most up to date, I found this: https://pkg.go.dev/github.com/go-ldap/ldap/v3@v3.4.12

My concern is about LDAP's security. I believe it is reasonable to think that the latest available version of LDAP would have the latest and most up to date security patches applied.

I would like to feel secure knowing I have the protection of the newest version of LDAP which affords the best security protection available for Thunderbird laptop version 146.

However I have been unsuccessful in determining if Thunderbird 146 is using this LDAP latest version. Could you help me learn if Thunderbird 146 is utilizing the latest version of LDAP that is available? Thanks in advance.

Yes I know I am a bit verbose.

Dear Thunderbird Development Team

I'm a regular Thunderbird user. I'd like to provide feedback regarding security concerns regarding the UI specifications of the Android version of Thunderbird.

Currently, Thunderbird for Android displays the sender's "display name only" on the email list screen, making the sender's actual email address invisible at all times.

I feel this specification increases the following risks, particularly in smartphone environments:

- Anyone can freely forge display names. - Phishing scams posing as financial institutions, e-commerce sites, and official support are common. - Users often rely on the list screen or notifications to determine the content of emails.

As a result, a UI that makes it difficult to determine whether an email is from a legitimate sender at the list screen level can become a breeding ground for phishing scams.

The PC version of Thunderbird allows for detailed header display, etc., and I'm disappointed that the mobile version of Thunderbird, despite being the same Thunderbird, is at a disadvantage in terms of security.

I would appreciate it if you could consider the following improvements.

- Setting to always display "display name + email address" on the email list screen

I am using Thunderbird with both Microsoft and Gmail accounts. My question is... is Microsoft able to see that i am using a Gmail account, and/or the account name/adress, and vise versa?

This is not the first time you have sent an email to me indicating I should "View all sites where your info is exposed", and each time I receive your emails the sites you suggest are sites I have never seen before, let alone logged into with a password.

I use a Password Organizer Book, with all of my logins and passwords for each site I use. I do not use a password app, and have NEVER used a password app. Each time I go to the website you suggest, It's always a site I have never seen before so it would be impossible to login and change the password. I always check my Password Organizer Book to make sure.

I don't know what you want me to do since I cannot login to the website you are suggesting. Is there action I should be taking? I don't know what it would be, but if you know please let me know.

I received an email threatening to cancel Firefox because of inadequate usage. Is this for real or a scam? I do use Firefox but, perhaps not enough for Mozilla's rules? I would regret losing this privilege. Thanks.

I signed into one of my financial accounts and it said the sign in was with firefox windows 10. I have windows 11 on my computer. Is this a security issue? Fire fox says i am on the latest version

Hello,

I have saved message templates that I use. Each one also has a footer (which I save as an .html file).

When I use this template to send a message, the image in the footer doesn't load and I get the message: Thunderbird has blocked the file from loading in this message.

When I click UNBLOCK, nothing happens. The image still doesn't get added. It's a very small image from my footer/signature. 'When I compose a new message, I don't have this problem' – the image in the footer loads and is sent to the recipient. This problem occurs when I try to send a message saved in the templates. There's no way to "unblock the image" and send it.