Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How do I remove HEUR:Trojan.VBS.SAgent.gen from my computer?

Hi, I just noticed that my computer has been infected by a trojan called "HEUR:Trojan.VBS.SAgent.gen", and I can't remove it via Kapersky...The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code). Kapersky stated that these two files are the source of the Trojan (they are not found as an e-mail attachment in my inbox, it's all code in the inbox file in Thunderbird):

P000009384:Emirates_Marble-pdf.gz and P000009384:Emirates_Marble-pdf.vbs

So I'm simply wondering how I should go about to remove this trojan from my computer?

Source: https://threats.kaspersky.com/en/threat/HEUR:Trojan.VBS.SAgent.gen/

Hi, I just noticed that my computer has been infected by a trojan called "HEUR:Trojan.VBS.SAgent.gen", and I can't remove it via Kapersky...The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code). Kapersky stated that these two files are the source of the Trojan (they are not found as an e-mail attachment in my inbox, it's all code in the inbox file in Thunderbird): P000009384:Emirates_Marble-pdf.gz and P000009384:Emirates_Marble-pdf.vbs So I'm simply wondering how I should go about to remove this trojan from my computer? Source: https://threats.kaspersky.com/en/threat/HEUR:Trojan.VBS.SAgent.gen/

Chosen solution

The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code).

That is exactly the reason why it won't do any harm as long as it just sits in the Inbox file. Therefore, leave it alone. If the Kaspersky warning bothers you, tell the Kaspersky real-time scanner not to scan the Thunderbird profile. https://support.mozilla.org/en-US/kb/profiles-where-thunderbird-stores-user-data#w_how-to-find-your-profile

Otherwise you're risking that Kaspersky corrupts your Inbox file, which in worst case can result in data loss.

It's also recommended to create backups of the Thunderbird profile on a regular basis. https://support.mozilla.org/kb/profiles-where-thunderbird-stores-user-data#w_backing-up-a-profile

Read this answer in context 👍 1

All Replies (3)

Chosen Solution

The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code).

That is exactly the reason why it won't do any harm as long as it just sits in the Inbox file. Therefore, leave it alone. If the Kaspersky warning bothers you, tell the Kaspersky real-time scanner not to scan the Thunderbird profile. https://support.mozilla.org/en-US/kb/profiles-where-thunderbird-stores-user-data#w_how-to-find-your-profile

Otherwise you're risking that Kaspersky corrupts your Inbox file, which in worst case can result in data loss.

It's also recommended to create backups of the Thunderbird profile on a regular basis. https://support.mozilla.org/kb/profiles-where-thunderbird-stores-user-data#w_backing-up-a-profile

Modified by christ1

Thanks for the help Chris =) I figured as much, but I wanted to know for sure. I shall look into it asap.

Thx again, and have a nice day.

Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.