Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Eheka Pytyvõha

Emboyke pytyvõha apovai. Ndorojeruremo’ãi ehenói térã eñe’ẽmondóvo pumbyrýpe ha emoherakuãvo marandu nemba’etéva. Emombe’u tembiapo imarãkuaáva ko “Marandu iñañáva” rupive.

Kuaave
Open

I always get: "newmsg Trojan:WIN/SuspiciousAttachmentScript.a"

Thunderbird Tekorosã
David Stanley ombohovái
OfficePC
OfficePC

I always get: "newmsg Trojan:WIN/SuspiciousAttachmentScript.a" and "C:\Users\newb\AppData\Local\Temp Trojan:WIN/SuspiciousAttachmentScript.a" from Mcafee when I open Thunderbird. I'm only getting this in Thunderbird and suspect it's a false positive of some kind. It's still worrying and I'd like to eliminate this. This has been going on for a couple of months. I've run several cleaners and anti-virus programs on the system, but it still returns.

thanks

I always get: "newmsg Trojan:WIN/SuspiciousAttachmentScript.a" and "C:\Users\newb\AppData\Local\Temp Trojan:WIN/SuspiciousAttachmentScript.a" from Mcafee when I open Thunderbird. I'm only getting this in Thunderbird and suspect it's a false positive of some kind. It's still worrying and I'd like to eliminate this. This has been going on for a couple of months. I've run several cleaners and anti-virus programs on the system, but it still returns. thanks

Opaite Mbohovái (3)

George Kitsoukakis
George Kitsoukakis
  • 25 oipytyvõvéva
  • Mboguataha

Hi

Thunderbird temporarily extracts email attachments or scripts to your Windows AppData\Local\Temp folder and McAfee is watching that Temp folder and deletes that temporary file.

Do because the original email is still sitting in your Thunderbird inbox, the next time you open Thunderbird, it tries to sync and cache that email again and McAfee flags it again.

So you need to find that email end delete it from your Inbox/Junk/Spam folder

To find the exact email causing the issue, look at the McAfee history log, it might give you a specific file name.

OfficePC
OfficePC Porandu apoha

Thanks for getting back. I'll try this.

David Stanley
David Stanley

I have had a similar problem in the last couple of days. The biggest issue was that I did not know where the newmsg file was coming from. I use the MS Defender antivirus which correctly deleted the file when it finds it is infected. Eventually I worked out it was from Thunderbird. I found a scanner from Emsisoft called Emergency Kit which was able to scan inside Thunderbird message stores and identify the problem messages. In my case they were more than 10 years old and buried in a folder.

What would have really helped is if the newmsg file was more helpfully named. Something like thunderbirdnewmsg would be so much better.

Eporandumína

Nde eikéke nde mba’etepe embohovái hag̃ua ñe’ẽmondo. Ikatúpa, emoñepyrũ peteĩ porandu, ndereguerekói gueteriramo nemba’ete.