r/Thunderbird • u/antoonvdr • 2d ago

Desktop Help Which attachment is causing this "newmsg"?

Since a couple of days my McAfee quarantines a threat from an attachment that contains a trojan virus?

Name: trojan:win/suspiciousattachmentscript.a

File: ......\appdata\local\temp\newmsg

Status: Quarantined

I have been going through my spam and trash folders of all my email accounts, deleted them all, went to the webmail side and did the same thing, but this antivirus message keeps popping up. All my accounts are through IMAP servers. It looks like this threat is firing twice or 5 times and then goes dormant until I do something else in Thunderbird. I suspect this attachment is in a "regular" folder, but how to identify?

2 Upvotes

67% Upvoted

4 comments sorted by

1

u/sifferedd 2d ago

First thing to try is close all open apps and delete all files and folders in C:\Users\username\AppData\Local\Temp.

1

u/antoonvdr 2d ago

Did that. A few folders were locked but otherwise everything else, folders and files were deleted. That did not stop the popups from reappearing....

1

u/antoonvdr 8h ago

Restarted in safe mode, deleted all files but did not solve the problem unfortunately.