Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Avatar for Username

ابحث في الدعم

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Thunderbird possible Trojan

  • 2 (ردّان اثنان)
  • 0 have this problem
  • 217 views
  • آخر ردّ كتبه dhunt21

dhunt21
dhunt21
more options

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com

-Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json

-Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial

-System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe


(end)

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json -Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial -System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe (end)

الحل المُختار

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan

Read this answer in context 👍 0

All Replies (2)

david
david
  • Top 10 Contributor
more options

My guess - and it's just a guess - is that you may have accessed the thunderbrowse website, intentionally or unintentionally. Malwarebytes usually identifies a file to remove. This is not a Thunderbird problem. My suggestion is to follow the Malwarebytes suggestion, and that may require a reinstallation. Another option often offered is to ignore the warning if you feel that there is no threat. I also use the Windows antivirus and Malwarebytes and that has been my experience.

dhunt21
dhunt21 صاحب السؤال
more options

الحل المُختار

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan