Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Possible Security Issue Thunderbird Installation

  • 1 个回答
  • 1 人有此问题
  • 1 次查看
  • 最后回复者为 Matt

BDSchnoo
BDSchnoo
more options

Downloaded file "Thunderbird Setup 78.10.2.exe" on 19 May 2021 from https://www.thunderbird.net/en-US/ File checksums: MD5: be926861eb074b88a83b5126c94441f9 SHA256: 5edd968473f5dca86702d80238a3d6d63bb7633d62c82f8eb572830bf60580d6

Installed Thunderbird on a Windows 10 system, filled in requested email account information, and when Thunderbird was configuring the account, received a Norton 360 Alert: Web Attack Rig Exploit Kit Redirection 13 from http://findresults.site//?rpid=2PO5N5455, Intrusion attempt by 103.224.182.251, 80 was blocked.

Ran a full system scan with Norton 360, uninstalled Thunderbird, installed Malwarebytes and scanned system. No security issues found.

Don't know if the timing of the intrusion attempt was a coincidence or if there might be a security issue with Thunderbird installation.

Downloaded file "Thunderbird Setup 78.10.2.exe" on 19 May 2021 from https://www.thunderbird.net/en-US/ File checksums: MD5: be926861eb074b88a83b5126c94441f9 SHA256: 5edd968473f5dca86702d80238a3d6d63bb7633d62c82f8eb572830bf60580d6 Installed Thunderbird on a Windows 10 system, filled in requested email account information, and when Thunderbird was configuring the account, received a Norton 360 Alert: Web Attack Rig Exploit Kit Redirection 13 from http://findresults.site//?rpid=2PO5N5455, Intrusion attempt by 103.224.182.251, 80 was blocked. Ran a full system scan with Norton 360, uninstalled Thunderbird, installed Malwarebytes and scanned system. No security issues found. Don't know if the timing of the intrusion attempt was a coincidence or if there might be a security issue with Thunderbird installation.

所有回复 (1)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

I personally uninstalled Nortons products about 2003 and have not gone back because they were not serious about security only about false positives and flashing red alerts.

Given the source IP is a hosting company and there are some 35,817 web sites hosted on the domain https://ipinfo.io/103.224.182.251 and the Alert is about a web redirect I would say that the issue you experiences has zero association with the Thunderbird install.