Cox/Yahoo mail log in
My Yahoo mail (used to be Cox) was working fine until the weekend then started giving me a pop up asking new log in as mentioned in another query: https://support.mozilla.org/bm/questions/1459534
where the "Thunderbird" log in page runs through several URLs (Yahoo and Google among them) and winds up on a URL tsdtocl.com which a couple of sites flag as malicious. NoahSUMO suggests running an AV scan.
I ran MBAM pro (scan for rootkits), Malwarebytes adwcleaner, Sophos Scan and Clean and received clean on all. Haven't run HitmanPro as it messed up my computer several years ago when I tried it.
I tried moving mail from the inbox of one of the accounts (I have several) to a Local folder, deleting the account, and creating a new account (thinking maybe something would be different?). Of course, it wasn't. The login page winds up on the same URL: tsdtocl.com
My Mailwash Pro had suddenly stopped connecting to the Yahoo accounts over the weekend as well.
所有回复 (1)
Additional info on the Thunderbird/Yahoo log in landing on tsdtocl.com webpage.
I have deleted then recreated one of the accounts with Mailwasher Pro (which had also stopped accessing Yahoo over last weekend, 8/18) and that program does NOT land on the tsdtocl.com website (see first attached image) but on login.yahoo.com.
I also installed Thunderbird on another computer as a test and set up the account in IMAP. After going through several URLs including yahoo.com, google.com, Google analytics, and others, the log in page ended up at usersync.gumgum.com (second image).
I pressed enter and the next screen went through several more URLs, ending up on tsdtocl.com (third image) for the password. Both screens have the Thunderbird image in the upper left corner. Both are https with a green lock symbol.
Just kind of weird how the log in winds up on a page that is blank if accessed via browser window (tsdtocl.com is blank) and is shown as malicious by seclookup and suspicious by another URLscanner site. It could be false positives, but I don't know. When I try accessing the seclookup site to see what it says about tsdtocl.com, MBAM blocks the site on my computer.
