This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Thunderbird inbox messages' content modified or deleted by internet virus.

more options

One week ago, an infected e-mail message apparently got into my Thunderbird inbox, which is located at c:\users\...\mail\local folders\inbox. The Norton Security report informs; "This threat has been removed. No further action is needed, Threat name: Compressed threats." However, all messages that were in the inbox folder had their content either completely erased or substituted by long computer language lines related to e-mail messages that have nothing to do with the affected one. The oldest message that was stored in the inbox, which had been received on 25/12/2016 was substituted by a message sent by "Sex Shop online <dicasmelhores@asdicasmelhores.com.br>", dated 21/01/2017 00:22, containing sex products related offers. I would like to know: 1) What actually happened? 2) Is it right that no further action is needed? 3) Is there a way I can get back my old messages' contents?

One week ago, an infected e-mail message apparently got into my Thunderbird inbox, which is located at c:\users\...\mail\local folders\inbox. The Norton Security report informs; "This threat has been removed. No further action is needed, Threat name: Compressed threats." However, all messages that were in the inbox folder had their content either completely erased or substituted by long computer language lines related to e-mail messages that have nothing to do with the affected one. The oldest message that was stored in the inbox, which had been received on 25/12/2016 was substituted by a message sent by "Sex Shop online <dicasmelhores@asdicasmelhores.com.br>", dated 21/01/2017 00:22, containing sex products related offers. I would like to know: 1) What actually happened? 2) Is it right that no further action is needed? 3) Is there a way I can get back my old messages' contents?

All Replies (2)

more options
1) What actually happened?

Norton decided it would be a good idea to delete a message from your Inbox. In doing so, it did damage your mail files, and created a mess.

2) Is it right that no further action is needed?

You'll have to clean up the mess Norton created.

To prevent this happening again in the future follow these instructions.

Create an exception in your anti-virus software for the Thunderbird profile folder, so that the anti-virus real-time scanner will not scan it. http://kb.mozillazine.org/Profile_folder_-_Thunderbird

Don't let your anti-virus software scan incoming and outgoing messages.

Don't let your anti-virus software scan attachments.

Don't let your anti-virus software intercept your secure connection to the server.

Remove any add-ons your anti-virus software may have installed in Thunderbird.

Keep it working. http://kb.mozillazine.org/Keep_it_working_-_Thunderbird

3) Is there a way I can get back my old messages' contents?

Try to rebuild the index file of the troubled folder.

Right-click the folder - Properties - Repair Folder

If that doesn't fix it, restore a recent backup of your Thunderbird profile.

more options