Trojan issue/possible reload of Thunderbird
Windows Security sent a bunch of message to me today regarding having found Trojan:Win32/AgentTesla!ml in a Thunderbird profiles folder in the appdata section of the program. I had a tough time getting rid of it, but having done so, I then tried to start Thunderbird. It started slowly, loaded and then hung while downloading messages from the email server. I tried again after a restart and same issue. I'm guessing Windows Security did something to corrupt Thunderbird.
So, my question is this. Is there a way to reset or repair Thunderbird from this? Or should I uninstall and do a clean install? I'm looking to keep my archives and emails, how do I keep that if I must reinstall Thunderbird? I'm using Windows 10 Home, everything up to date. I did rescan after the repair, did an additional offline scan and then ran Malwarebytes. It all has come up clean.
Thanks in advance!
Chosen solution
Hello there w2 Dsx. We have read your message. We try to help you.
okay after reading the write up for us we find that the startup is delayed or hindered. To solve this, you can restart the Thunderbird software on your PC in the safe mode or trouble shoot mode.
in this mode you try to look at the addons that could possibly be the problem.
please try this until you have found the app in question and delete this app.
This is an option to diagnose what could be the problem with your Thunderbird software starting too slowly.
you can also boot in safe mode with networking. All basic components will be reinstalled. And could remove this slow startup.
Yes use your security software. That s a good thing.
Also : your pc that is having trouble with certain hardware or software subject s.
https://support.mozilla.org/en-US/kb/security-panel-settings-in-thunderbird
Greetings Firefox volunteer.
All Replies (3)
Chosen Solution
Hello there w2 Dsx. We have read your message. We try to help you.
okay after reading the write up for us we find that the startup is delayed or hindered. To solve this, you can restart the Thunderbird software on your PC in the safe mode or trouble shoot mode.
in this mode you try to look at the addons that could possibly be the problem.
please try this until you have found the app in question and delete this app.
This is an option to diagnose what could be the problem with your Thunderbird software starting too slowly.
you can also boot in safe mode with networking. All basic components will be reinstalled. And could remove this slow startup.
Yes use your security software. That s a good thing.
Also : your pc that is having trouble with certain hardware or software subject s.
https://support.mozilla.org/en-US/kb/security-panel-settings-in-thunderbird
Greetings Firefox volunteer.
Modified by Googlethunderbird
The first response seemed to do the trick. I haven't done safe mode in ages and was expecting to scroll through each part of the boot phase, and then the same with Thunderbird when it loaded, but Windows simply loaded with "safe mode" in each corner of the screen. Same thing with Tbird, albeit slowly the first time and then after closing and re-opening Tbird, it performed as before so I'll marked it solved and thanks for the response.
As to falling for foreign language spam, I'm aware of this and think the Windows Security may have false flagged a legit folder from a statement from a retirement company that I use. I did scan the emails later from that source and they came up as clean. Only thing is I have never had a response from WSE like I did and trusted it at the time as real threat. If I had quarantined it instead of removing it, I'd send it out to get tested but I chose remove at the time.
Thanks for your response...