Avatar for Username

Søg i Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Læs mere

Denne tråd blev arkiveret. Stil et nyt spørgsmål, hvis du har brug for hjælp.

Thunderbird possible Trojan

  • 2 svar
  • 0 har dette problem
  • 1 visning
  • Seneste svar af dhunt21

dhunt21
dhunt21
more options

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com

-Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json

-Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial

-System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe


(end)

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json -Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial -System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe (end)

Valgt løsning

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan

Læs dette svar i sammenhæng 👍 0

Alle svar (2)

david
david
  • Top 10 Contributor
more options

My guess - and it's just a guess - is that you may have accessed the thunderbrowse website, intentionally or unintentionally. Malwarebytes usually identifies a file to remove. This is not a Thunderbird problem. My suggestion is to follow the Malwarebytes suggestion, and that may require a reinstallation. Another option often offered is to ignore the warning if you feel that there is no threat. I also use the Windows antivirus and Malwarebytes and that has been my experience.

dhunt21
dhunt21 Spørgsmålsstiller
more options

Valgt løsning

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan