Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Hierdie gesprek is in die argief. Vra asseblief 'n nuwe vraag as jy hulp nodig het.

Thunderbird possible Trojan

  • 2 antwoorde
  • 0 hierdie probleem
  • 200 views
  • Laaste antwoord deur dhunt21

dhunt21
dhunt21
more options

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com

-Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json

-Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial

-System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe


(end)

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json -Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial -System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe (end)

Gekose oplossing

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan

Lees dié antwoord in konteks 👍 0

All Replies (2)

david
david
  • Top 10 Contributor
more options

My guess - and it's just a guess - is that you may have accessed the thunderbrowse website, intentionally or unintentionally. Malwarebytes usually identifies a file to remove. This is not a Thunderbird problem. My suggestion is to follow the Malwarebytes suggestion, and that may require a reinstallation. Another option often offered is to ignore the warning if you feel that there is no threat. I also use the Windows antivirus and Malwarebytes and that has been my experience.

dhunt21
dhunt21 Vraag-eienaar
more options

Gekose oplossing

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan