Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Sykje yn Support

Mij stipescams. Wy sille jo nea freegje in telefoannûmer te beljen, der in sms nei ta te stjoeren of persoanlike gegevens te dielen. Meld fertochte aktiviteit mei de opsje ‘Misbrûk melde’.

Mear ynfo
Iepen

I always get: "newmsg Trojan:WIN/SuspiciousAttachmentScript.a"

Thunderbird Befeiliging
David Stanley hat 3 moannen lyn antwurde
OfficePC
OfficePC

I always get: "newmsg Trojan:WIN/SuspiciousAttachmentScript.a" and "C:\Users\newb\AppData\Local\Temp Trojan:WIN/SuspiciousAttachmentScript.a" from Mcafee when I open Thunderbird. I'm only getting this in Thunderbird and suspect it's a false positive of some kind. It's still worrying and I'd like to eliminate this. This has been going on for a couple of months. I've run several cleaners and anti-virus programs on the system, but it still returns.

thanks

I always get: "newmsg Trojan:WIN/SuspiciousAttachmentScript.a" and "C:\Users\newb\AppData\Local\Temp Trojan:WIN/SuspiciousAttachmentScript.a" from Mcafee when I open Thunderbird. I'm only getting this in Thunderbird and suspect it's a false positive of some kind. It's still worrying and I'd like to eliminate this. This has been going on for a couple of months. I've run several cleaners and anti-virus programs on the system, but it still returns. thanks

Alle antwurden (3)

George Kitsoukakis
George Kitsoukakis
  • Top 25-meiwurker
  • Moderator

Hi

Thunderbird temporarily extracts email attachments or scripts to your Windows AppData\Local\Temp folder and McAfee is watching that Temp folder and deletes that temporary file.

Do because the original email is still sitting in your Thunderbird inbox, the next time you open Thunderbird, it tries to sync and cache that email again and McAfee flags it again.

So you need to find that email end delete it from your Inbox/Junk/Spam folder

To find the exact email causing the issue, look at the McAfee history log, it might give you a specific file name.

OfficePC
OfficePC Fraacheigener

Thanks for getting back. I'll try this.

David Stanley
David Stanley

I have had a similar problem in the last couple of days. The biggest issue was that I did not know where the newmsg file was coming from. I use the MS Defender antivirus which correctly deleted the file when it finds it is infected. Eventually I worked out it was from Thunderbird. I found a scanner from Emsisoft called Emergency Kit which was able to scan inside Thunderbird message stores and identify the problem messages. In my case they were more than 10 years old and buried in a folder.

What would have really helped is if the newmsg file was more helpfully named. Something like thunderbirdnewmsg would be so much better.

In fraach stelle

Jo moatte jo oanmelde by jo account om op berjochten te antwurdzjen. Stel in nije fraach as jo noch gjin account hawwe.