Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Trojan virus in INBOX-1

  • 3 replies
  • 1 has this problem
  • 11 views
  • Last reply by Tusse

more options

Hello! I use F-Secure Safe antivirusprogram. 25.6.2018 F-Seucre updated the proogran to 17.4, and after that it found a Trojan-virus located in "INBOX-1" (see the attached screenshot image). I don't know what type of file it is. It has no identifier name, and I cannot open it. The F-Secure Safe program cannot do anything to it. So I have two questions: 1. What will happen if I delete the whole file? Do all my inbox-mails dissapear? 2. If I start to delete mails from Thunderbird, will the deleted mails dissapear from this INBOX-1 file?

I use Gmail synced to Thunderbird, so I presume I have to delete mails first directly from Gmail, and after that from Thunderbird, if they are still there. It's a hell of a job, since I have thousands of e-mails starting from 2010. But I see no other way to get rid of the Trojan.

BUT! ! If the data still remains in this "INBOX-1" although the mails are deleted, it's a pointless job.

Hello! I use F-Secure Safe antivirusprogram. 25.6.2018 F-Seucre updated the proogran to 17.4, and after that it found a Trojan-virus located in "INBOX-1" (see the attached screenshot image). I don't know what type of file it is. It has no identifier name, and I cannot open it. The F-Secure Safe program cannot do anything to it. So I have two questions: 1. What will happen if I delete the whole file? Do all my inbox-mails dissapear? 2. If I start to delete mails from Thunderbird, will the deleted mails dissapear from this INBOX-1 file? I use Gmail synced to Thunderbird, so I presume I have to delete mails first directly from Gmail, and after that from Thunderbird, if they are still there. It's a hell of a job, since I have thousands of e-mails starting from 2010. But I see no other way to get rid of the Trojan. BUT! ! If the data still remains in this "INBOX-1" although the mails are deleted, it's a pointless job.

All Replies (3)

more options

0. F-Secure Safe shoud NOT be scanning your email files. You should set F-Secure to stop scanning your thunderbird profile directory https://support.mozilla.org/en-US/kb/profiles-where-thunderbird-stores-user-data

> 1. What will happen if I delete the whole file? Do all my inbox-mails dissapear?

Yes, bad.

> 2. If I start to delete mails from Thunderbird, will the deleted mails dissapear from this INBOX-1 file?

Sure.

> (3.) I use Gmail synced to Thunderbird, so I presume I have to delete mails first directly from Gmail, and after that from Thunderbird,

Depends. Is this a pop account? And, if it is pop, do you have Thunderbird settings to keep mail on the server after downloading?

4. (After you set F-Secure to stop scanning your thunderbird profile directory) You should set Thunderbird Options > Security > Antivirus > Allow antivirus clients to quarantine...

more options

Okay...."F-Secure Safe shoud NOT be scanning your email files." I have to go deepen in to that, and read about it. Sounds odd that the e-mails wont be scanned for virus-attacs. Or is is so, that Thunderbird/Gmail has its own protection? Thanks for your answer Wayne! Cheers! Tusse

more options

Hello! Problem solved after many days of work. I found the Trojan-virus and destroyed it. It was in an email attachment from march 2014 (wich I never opened, because it looked very suspect). I should had deleted the mail immediately, but probably I forgot to do it. What I cannot understand, is why F-Secure have'nt found the Trojan earlyer. Over four years...

But one question more: I noticed that I have the same Trojan on my old laptop, on wich I used Thunderbird earlyer. It's located in the same place: C:\Users\xxxxxxxx\ Lenovo\AppData\Roaming\Thunderbird\Profiles\wmtgcx6i.default\ImapMail\imap.gmail-1.com\INBOX-1

Can I delete the whole Thunderbird-folder from this laptop?

Cheers!

Tusse