Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

Avatar for Username

Pesquisar no apoio

Evite burlas no apoio. Nunca iremos solicitar que telefone ou envie uma mensagem de texto para um número de telefone ou que partilhe informações pessoais. Por favor, reporte atividades suspeitas utilizando a opção "Reportar abuso".

Saber mais

Esta discussão foi arquivada. Se precisar de ajuda, por favor, coloque uma nova questão.

Thunderbird possible Trojan

  • 2 respostas
  • 0 têm este problema
  • 220 visualizações
  • Última resposta por dhunt21

dhunt21
dhunt21
more options

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com

-Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json

-Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial

-System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe


(end)

Whenever I launch Thunderbird, Microsoft Defender (and Malwarebytes) warns me of a possible virus. Scanning my system doesn't seem to find anything. Firefox appears to work normally. Following is info on warning - Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/30/22 Protection Event Time: 3:51 PM Log File: 1ba35f88-105a-11ed-9026-f48e38edb898.json -Software Information- Version: 4.5.12.204 Components Version: 1.0.1725 Update Package Version: 1.0.57967 License: Trial -System Information- OS: Windows 10 (Build 19044.1826) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Thunderbird\thunderbird.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: RiskWare Domain: start.thunderbrowse.com IP Address: 45.33.20.235 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Thunderbird\thunderbird.exe (end)

Solução escolhida

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan

Ler esta resposta no contexto 👍 0

Todas as respostas (2)

david
david
  • Top 10 Contributor
more options

My guess - and it's just a guess - is that you may have accessed the thunderbrowse website, intentionally or unintentionally. Malwarebytes usually identifies a file to remove. This is not a Thunderbird problem. My suggestion is to follow the Malwarebytes suggestion, and that may require a reinstallation. Another option often offered is to ignore the warning if you feel that there is no threat. I also use the Windows antivirus and Malwarebytes and that has been my experience.

dhunt21
dhunt21 Proprietário da pergunta
more options

Solução escolhida

I discovered that the Thunderbird start page had been hijacked and redirected Thunderbird to thunderbrowse.com which Malwarebytes identified as a high risk site and blocked. I didn't realize that Thunderbird even had a start page, but once I figured it out, it was an easy fix. Thanks for the help.

Dan