تاندربرد اجتماع انجمن

From the day when I started using Thunderbird Mail client, from that moment only, McAfee is notifying me after every 5 seconds of a Trojan Threat

C:\Users \Pankaj Jain \ AppData \ Local \ Temp\ Trojan:Win / SuspiciousAttachmentScript.a

And the moment I uninstalled Thunderbird it stopped notifying it. And then I reinstalled it, same started happening. It hijacks the system and if I am writing, it stops that and wants me to see that notification (which all antiviruses wants to). Even worse is that I cant find any setting in McAfee to stop this notification.

I am frustrated now. Can you help on this?

I received an email from Thunderbird (my email provider) wanting me to join the Early Bird Beta but their link to pay with PayPal didn't work so they requested I add a new credit card. I use PayPal often so I know my card on file with PayPal is OK. Seemed odd to me for their request. I could forward their email to me if needed. Looks like they are using Paddle.com Market Limited.

Yesterday, Oct 6, at 3:20 pm, tbird was unable to download messages from my att server. The error message is "The certificate for inbound.att.net does not come from a trusted source". Nothing that I know of has changed when I look at the account settings.

Do I need to contact Att/Yahoo? If so, how can I describe what to tell them, as I have no knowledge of certificates and how they work (or don't work).

Bonjour,

Il semblerait que mon compte Thunderbird soit piraté. Tous les messages que je reçois sont précédés de la mention "[hotmailerrr_bot] Security Alert: " En dessous apparait un écran noir sur lequel est écrit: "This mail was moved to your cloud lounge" suivi d'un texte faisant la promotion d'un "Premium Cloud". Le message original ne peut pas être lu et si il y a une pièce jointe, elle est éliminée.

Ce problème est-il connu ? Y a-t-il une solution ?

Remerciements

All of a sudden I am getting repeated messages as below:

"Connection error. The certificate for imap.shaw.ca does not come from a trusted source. Click to open server security settings."

Not sure why, as things have been worker well. Checked settings all are configured correctly.

What now?

Explain the problem I have already described!! - When I try to read an e-mail a 'box' appears saying 'Thunderbird: The certificate for imap.shaw.ca does not come from a trusted source'--What is this for?? _ Yesterday an e-mail I sent to several contacts showed as 'Sent' BUT did not register in my 'Sent' folder ----I had to phone England to check that they had received the e-mail, which they had. Today I was able to send e-mails & they were recorded in my 'sent' folder BUT the other problem still persists. Please advise if there is something that can be done to correct this problem. Thank you Phyllis M.

I have a trojan in one of my emails. Every time I start TB McAfee catches the bug. I cannot find it. What processes does TB execute while loading. I want to be able to isolate the the bug. What tools can I use in TB to help with this.

As an 80 year old woman of sound mind and competent in most things I still struggle with AI & IT! Can anyone advise or help me restore my system with or without my original email? Do I have to change it, change my provider or start again with everything changed? Thank you for any help.

Hi, Will there ever be a functioning option to set up a primary password that aborts the start up if not provided with the correct password. Still in 2026, hitting cancel gives access to all already synced emails. Please, soon!

Recently purchased a new HP laptop. And installed my ZoneAlarm without issue. Then downloaded Thunderbird and installed it. On opening ZA went berserk constantly alerting every few seconds saying there was a Bot. See attached screenshot from the last instance of this. Deleted Thunderbird and the problem disappeared. Was the problem actually caused by Thunderbird and have you any idea what was trying to access the website in the screenshot and what the website is that it was trying to access?

existing emails are not password protected, password only good to retrieve new emails. If you open Thunderbird and password window appears and you hit cancel all existing emails are exposed for viewing. This is a security issue.

Sometime ago, when I was regularly using more than one computer, I thought I'd found a way to have my Thunderbird address book centrally located and accessible from both computers. I got no success from attempting this, but have suffered some side-effects every since. Configuring Thunderbird back then somehow involved using the location "demo.sogo.nu" and I believe it related to a security certificate. What used to happen was, soon after rebooting the computer, I'd get a couple of pop-up messages about connecting to demo.sogo.nu that I could clear away easily. Recently, something changed regarding this certificate and I now get pop-ups (screenshot attached) that continually bother me to create a security exception. I want these gone! I've gone into the Certificate Manager and can't find anything under the Server tab to delete. One other clue is a second screenshot that I discovered somewhere in Thunderbird that actually shows the *.sogo.nu certificate - but offers no way to delete it! Can anyone give me a hand? My only alternative is to literally annihilate Thunderbird and start from scratch, but I really don't want to go there.

OPERATING SYSTEM Windows 10 Professional (x64) Version 22H2 (build 19045.6466) System Model : HP HP ProDesk 600 G3 DM SYSTEM MODEL HP HP ProDesk 600 G3 DM Enclosure Type: Mini PC PROCESSOR 2.80 gigahertz Intel Core i7-6700T 256 kilobyte primary memory cache 1 megabyte secondary memory cache 8 megabyte tertiary memory cache 64-bit ready MEMORY 15.88 Gigabytes Usable Installed Memory BOARD HP 829E KBC Version 06.29 STORAGE 4.51 Terabytes Usable Local Storage Capacity 3.59 Terabytes Local Storage Free Space

• Waterfox - 6.6.12 (64-bit) • Thunderbird - 140.13.0esr (64-bit) • WordPerfect 12.0.0.602

======================================================

MESSAGE:

“Your email ***.net and data has been hacked. . . . The Trojan virus gives me complete access and control over the device you are using. As a result, blah, blah, blah, blah . . . “

I rather doubt the veracity of this, seeing it includes “I can see the full list of your contacts from your phone and all your social networks” — since I do not access the Internet from any telephone.

It has been several years since I’ve received something of this sort, so have remained confident that my system(s) remain well-protected. However, since the message did arrive in one of my email accounts, is there still the potential of my contacts list(s) being compromised, and, if so, how to safeguard against that?

Many thanks. Appreciated.

I've just recently (over the past 10 days) been notified about 3-4 times a day by Windows Defender which flagged "something" as Trojan:HTML/ScrInject.AW!MTB in "file" %temp%/newmsg.

That's where my copy of Tbird puts temp files. Closing it stops this behavior. Uninstalling and reinstalling w/out deleting my profile caused the same behavior, but uninstalling and cleaning out my profile files seems to have stopped this behavior.

I only have one extension, Compact Headers, and that doesn't seem to be the problem. Has anyone else experienced anything like this?

Jim

The certificate for pop.3marysvilleprint.com is not vailid for that server. Someone could be trying to impersonate the server and you should not continue

Hi using 153esr and Win11

I have my emails on an encrypted drive. Until now if I closed Thunderbird I would have to enter my Master/Primary password before and emails would show, i.e they were protected from casual view.

Now if I type [cancel] at the request for a password, twice in a row than all my emails are visible.

I though it may be this new thing where the [close] icon functions differently, but even if I close via the menu File > Exit it seems Thunderbird still has access to my emails without authorisation.

Any ideas would be useful

Thanks