Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Əgər kömək lazımdırsa lütfən yeni sual verin.

Thunderbird possible Trojan

  • 2 cavab
  • 0 have this problem
  • 1 view
  • Last reply by dhunt21

dhunt21
dhunt21
more options

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com

-Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json

-Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial

-System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe


(end)

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json -Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial -System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe (end)

Chosen solution

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan

Read this answer in context 👍 0

All Replies (2)

david
david
  • Top 10 Contributor
more options

My guess - and it's just a guess - is that you may have accessed the thunderbrowse website, intentionally or unintentionally. Malwarebytes usually identifies a file to remove. This is not a Thunderbird problem. My suggestion is to follow the Malwarebytes suggestion, and that may require a reinstallation. Another option often offered is to ignore the warning if you feel that there is no threat. I also use the Windows antivirus and Malwarebytes and that has been my experience.

dhunt21
dhunt21 Question owner
more options

Seçilmiş Həll

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan