Thunderbird Community Forum

existing emails are not password protected, password only good to retrieve new emails. If you open Thunderbird and password window appears and you hit cancel all existing emails are exposed for viewing. This is a security issue.

OPERATING SYSTEM Windows 10 Professional (x64) Version 22H2 (build 19045.6466) System Model : HP HP ProDesk 600 G3 DM SYSTEM MODEL HP HP ProDesk 600 G3 DM Enclosure Type: Mini PC PROCESSOR 2.80 gigahertz Intel Core i7-6700T 256 kilobyte primary memory cache 1 megabyte secondary memory cache 8 megabyte tertiary memory cache 64-bit ready MEMORY 15.88 Gigabytes Usable Installed Memory BOARD HP 829E KBC Version 06.29 STORAGE 4.51 Terabytes Usable Local Storage Capacity 3.59 Terabytes Local Storage Free Space

• Waterfox - 6.6.12 (64-bit) • Thunderbird - 140.13.0esr (64-bit) • WordPerfect 12.0.0.602

======================================================

MESSAGE:

“Your email ***.net and data has been hacked. . . . The Trojan virus gives me complete access and control over the device you are using. As a result, blah, blah, blah, blah . . . “

I rather doubt the veracity of this, seeing it includes “I can see the full list of your contacts from your phone and all your social networks” — since I do not access the Internet from any telephone.

It has been several years since I’ve received something of this sort, so have remained confident that my system(s) remain well-protected. However, since the message did arrive in one of my email accounts, is there still the potential of my contacts list(s) being compromised, and, if so, how to safeguard against that?

Many thanks. Appreciated.

My default email address ([redacted-1]@btinternet.com) has been hacked and access to my contact list gained. Many contacts receiving emails purporting to be from me.. I have changed my default address to another one ([redacted-2]@gmail.com). What do you suggest I do or should I report it to another organisation? Thanks, Peter Russell

Hi Team,

Greetings!

I need your assistance regarding password protection for the Thunderbird email client.

I have configured an IMAP account in Thunderbird and enabled the **Primary Password** feature. However, if I cancel or skip the password prompt during startup, Thunderbird still opens successfully, and all previously synchronized email messages in the Inbox remain accessible. The user is also able to view the mailbox and access email content.

My requirement is that "Thunderbird should not open, display any email messages or allow Send/Receive operations unless the correct password is entered".

Could you please advise if this functionality is supported natively or suggest the recommended approach to achieve this?

Looking forward to your guidance.

Regards, Ps Cheema

Hi, I just noticed that my computer has been infected by a trojan called "HEUR:Trojan.VBS.SAgent.gen", and I can't remove it via Kapersky...The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code). Kapersky stated that these two files are the source of the Trojan (they are not found as an e-mail attachment in my inbox, it's all code in the inbox file in Thunderbird):

P000009384:Emirates_Marble-pdf.gz and P000009384:Emirates_Marble-pdf.vbs

So I'm simply wondering how I should go about to remove this trojan from my computer?

Source: https://threats.kaspersky.com/en/threat/HEUR:Trojan.VBS.SAgent.gen/

Dear all,

I would like to use Thunderbird on a shared computer at my universitys lab space (it is mainly my PC but other people have access and use it sometimes). However, as we are requested to keep mails confidential I thought it would be as easy as just setting a primary password and thunderbird would not start if that password is not set. However, that proofed to be a wrong assumption. Instead if I just cancel the dialog it will open and still display all the locally stored mails.

We are using IMAP server and I already set up that the mails are not stored locally. Still, some mails that I have used recently are visible. I am aware that there would anyway be the local copy in the profile folder but I guess none of the people sharing that computer would take the efford to check that, so I would be fine if I could simply prevent thunderbird from starting without the primary password.

Is there any option for that or any extention that would do so?

Thank you in advance! Juergen