How to locate and remove the attachment file to the Inbox folder?

Hello

My name is Piotr Tyborowski and I am the Doctor Web's Technical Support Engineer.
I had such application suport - one of our customers has problem with viruses in Thunderbird Inbox folder - our antivirus scanner has found two Trojan horses in a file located in the Inbox folder and moved all of the Inbox folder to quarantine. We know that these files can be found here:

> > C:\Users\Renatrix\AppData\Roaming\Thunderbird\Profiles\4dhjzo2v.default\Mail\Local Folders\Inbox.sbd\Konto WP\12145.part is ZIP archive
C:\Users\Renatrix\AppData\Roaming\Thunderbird\Profiles\4dhjzo2v.default\Mail\Local Folders\Inbox.sbd\Konto WP\12145.part\KeyDLL.dll - Trojan.KeyLogger.6153-infected
C:\Users\Renatrix\AppData\Roaming\Thunderbird\Profiles\4dhjzo2v.default\Mail\Local Folders\Inbox.sbd\Konto WP\12145.part\KeyDLL.dll - infected
> > > C:\Users\Renatrix\AppData\Roaming\Thunderbird\Profiles\4dhjzo2v.default\Mail\Local Folders\Inbox.sbd\Konto WP\12145.part\svhosts.exe - compressed by UPX
C:\Users\Renatrix\AppData\Roaming\Thunderbird\Profiles\4dhjzo2v.default\Mail\Local Folders\Inbox.sbd\Konto WP\12145.part\svhosts.exe - Trojan.Click.27588-infected
C:\Users\Renatrix\AppData\Roaming\Thunderbird\Profiles\4dhjzo2v.default\Mail\Local Folders\Inbox.sbd\Konto WP\12145.part\svhosts.exe - infected
C:\Users\Renatrix\AppData\Roaming\Thunderbird\Profiles\4dhjzo2v.default\Mail\Local Folders\Inbox.sbd\Konto WP\12145.part - archive infected

I'm not very familiar with Thunderbird, so my question is - is is possible to get this file 12145.part and remove it as well, even with the message that cointains inside?

Thank you in advance and Best Regards,.

Piotr Tyborowski
Doctor Web

Piotr,

If it's convenient, the absolutely safest approach is to delete the profile folder 4dhjzo2v.default while integer that TB is arrested.

If the person is to use IMAP or POP with an option to leave emails on the server, there should not be a loss of emails (except in local folders).

If there are important e-mails in local folders, and they are not infected, they could be exported to support storage and then imported into the new profile. There is an add-on to tuberculosis, which allows the import and export of emails in different formats.

You will find instructions on how to download and install it in http://barryduggan.info/exportMail.php

Tags: Thunderbird

Similar Questions

  • How to get back to the Inbox folder after deleting a message instead to open the next message?

    I don't want to open the next message in my Inbox, when I delete a message. I want to go back to the Inbox folder.

    I had the same problem, was driving me crazy until I found that I could enable a toolbar of menu by right-clicking on the toolbar and checking "menu bar". This brought menus that I was familiar with, including the "Tools". Then, I was able to apply these tips from the help system:

    Specify what happens to the message window when a message is deleted
    

    Location of the menu: tools | Options | Advanced | Read and display
    Check the "message close window/tab on move or delete.

  • WHY MY NEW EMAIL SEND MESSAGES IN THE FOLDER TO SEND IT AND NOT THE INBOX FOLDER? PLEASE HELP ME

    I must have changed something I shoud not have.  I was messin around to change things and it didn't work.  Now all my emails new message in the sent folder and not the Inbox?

    I'd appreciate any help you smart people can give me :)

    Check your message rules and see if you set up a message rule to shunt the in this folder.  It would be valuable to know what e-mail program, you are using and what version of Windows you have.  It is very difficult to give a useful answer when these information are not known.

    Steve

  • How to load and remove the iPod nano podcasts

    Since the new 12.4.0 iTunes I am unable to load new podcasts or remove the "old" iPod nano...

    I am able to delete podcasts played in my library, but there are some podcasts I want to keep (This American Life, etc.), even if I listened to them. However, with the new version of iTunes, they played podcasts seem to be automatically loaded on my Nano, even if I manually manage my content AND have said to delete played podcasts from the nano.

    Help! It is a very frustrating version of iTunes.

  • How to find and remove the corresponding line in British Colombia ADF

    Hello

    I have a table with simple fields and I created the class of java for this entity also
    Person
         - Person_Id (PK)
         - Person_Name
    I wanted to create a method of application module to find the entity corresponding to certain name
    but I can't find the code to do this.
    public class AppModuleImpl{
      public boolean deletePersonByName(String personName)
      {
        EntityDefImpl personDef = PersonImpl.getDefinitionObject();
        //How to get all rows and find the matching name then delete the row
       
        return false;
      }
    }
    Thank you
    11.1.1.5 Jdev

    You can do findByKey or getfilteredrows to get the lines and you can then delete.

  • How to find and remove the files in 'other' storage on Macbook Air?

    I already cleaned everything that's obvious files... trash, downloads, etc. But I still 65 GB of the file in 'others '. How can I find large files in 'Other' and delete them?

    Omni DiskSweeper can show you the exact size and location of all your files. It will be the inventory of your disc from files that occupy more space. It can also give you a fairer read disk space than the Finder or storage tab of the about this Mac. If you want you can even delete files from OmniDisk Sweeper.

  • How to locate and remove codecs of the dvd player

    can someone tell me please how to remove realplayer codecs? I already removed this program but microsoft fix it says the codecs are still in my computer, but I can't locate.

    http://www.Google.com/search?q=remove+RealPlayer+codecs&ie=UTF-8

  • 8.1 upgrade of Windows 8 Windows - how to find and remove the incomplete installation file

    I went to the Windows 8 8.1 Windows installation option. While it has been downloaded the file, I turned off by computer error. The file I have is not complete. I would like to delete this file and try again. How/where can I find this file to delete? When I try to access the Windows store to download the file again, it starts the installation process (which assumes that the file I have is over). I think that in the Manager of tasks in desktop view, that I managed to stop the process.

    Download uses a technology called BITS (Background Intelligent Transfer Service), as well as the missing pieces of the file will be downloaded when they are required.  So just let it run, it will take care of itself.

  • How to test and remove the loader object?

    Hello

    I am trying to load an object swfLoader on the scene and vimeo player (which I do with great success) and then delete them when I click on a button. I can remove it each separately, but when I put them in the same function I get an error. I think I need to test to see if they are on the stage with an if statement before I try to remove them, because I am getting an error NULL when I click the button. The problem is that I don't know how to test for them. I got as far to put the name of the variable in the condition. Can someone help me please?

    In an effort to keep the code as simple as possible, I do not understand the code where variables are declared and the swf loader and loader vimeo are instantiated on the stage. But if I need more for the problem to make sense, please let me know rather than pass on my request for help.

    Thank you.

    closePortfolio_but.addEventListener (MouseEvent.CLICK, onClickClose)

    function onClickClose (e:MouseEvent) {}

    If {(moogaloop)

    moogaloop.parent.removeChild (moogaloop);

         }

    If (swfLoader) {}

    swfLoader.parent.removeChild (swfLoader);

         }

    }

    closePortfolio_but.addEventListener (MouseEvent.CLICK, onClickClose)

    function onClickClose (e:MouseEvent)

    {

    moogaloop.parent.removeChild (moogaloop);

    swfLoader.parent.removeChild (swfLoader);

    }

  • How to find and delete the dupes in Photos

    How to find and remove the many dupes in Photos

    Duplicate Finder in the App Store will clean the photo library. However, I would be careful to make sure that nothing is really a duplicate.

  • When I download compressed files, they go to the local > temp location, when I extracted all the files, they are sent to the My Documents folder. Can I go to the local > temp location and delete the zip file?

    When I download compressed files, they go to the local level > temp location, when I extracted all the files, they are sent to the My Documents folder. Can I go to local > temp location and delete the zip file? Knowing that I still have the data in the My Documents folder.

    Once they are checked, of course. If you want to keep a backup, you can move the zip file in your documents folder.

    In fact, you can delete everything in the temporary folder that is not currently in use. Best time to do this removal is immediately after the start, before launching other applications.

  • PC DM files: my hard drive is currently filled by PC DM files in my folder/Public user folder. How can I safely remove the right files in this folder?

    My hard drive is currently filled by PC DM files in my folder/Public user folder.  How can I safely remove the right files in this folder?  Vista Home Premium 64 bit is my os.

    Hi templar_39,

    DM (Message Delivery) file types are not Windows files, they can be generated by a third-party program.

    This particular file type is often associated with audio data and can be hosted on some cell phones to be used as ringtones or multimedia clips. To my knowledge, these files can be generated by your mobile phone.

    Note: you can go ahead and remove these files only if you notice that the files do not contain any important information.

    If this happens without connect you all devices (like mobile PHONES), this may be a virus or malware activity. You can run a virus scan to get rid of them

    Step 1: A scanner online for any threat and try to correct

    http://OneCare.live.com/site/en-us/Center/cleanup.htm

    Thank you, and in what concerns:

    Ajay K

    Microsoft Answers Support Engineer

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • How to compress and decompress the file in mac

    How to compress and decompress the file in mac

    I will use third party software to do this.

  • How to get and install the file txtsetup.oem for xp

    need to know how to get and install the txtsetup.oem file to install xp

    Hello

    The easiest way would be to visit the website of the manufacturer of the motherboard. This would normally have downloads for any RAID drivers required for the loading of Windows XP. The download can be an "executable" who writes a disk for you. It can be also something like a zip file with all files inside that must be extracted and copied to a floppy disk.

    If your PC is not a floppy drive, life becomes quite complicated.

    Please mark this as useful or response if applicable.

    Tricky

  • I get videos from cell phones of the people with a type of file like 3GP. I need to know how to save and change the format so I can open them.

    I get videos from cell phones of the people with a type of file like 3GP. I need to know how to save and change the format so I can open them.

    Trying to convert to the. WMV format:

    There are many converters available on the net... some
    free... some detail.

    The following freeware converter is just one example:

    (FWIW... it's always a good idea to create a system)
    Restore point before installing software or updates)

    Format Factory (freeware)
    http://www.videohelp.com/tools/Format_Factory
    (the 'direct link' is faster download)
    (the file you want to download is: > FFSetup295.zip<>
    (FWIW... installation..., you can uncheck
    ('all' boxes on the final screens)
    (Windows XP / Vista / 7)

    First, you will need to decompress the file or just open the
    Drag > FFSetup295.exe< out="" of="" the="">
    and drop it on your desktop. To install left click.

    Next, after the download and installation of Format
    Factory... you can open the program and
    left click on the toolbar, the "Option" button and
    "Select an output folder to" / apply / OK.
    (this is where you find your files after they)
    are converted)

    Drag and drop your video clips on the main screen...

    Select "all to WMV" / OK...

    Click on... Beginning... in the toolbar...

    That should do it...

    Good luck...

Maybe you are looking for

  • worst ever itunes update 12.4

    It shows all the albums while it is scanning. I need to change instead of title of artists for the visible albums using control j. There is no upper box on the right side, where earlier versions have the bar as artists genres albums composers etc. I

  • Cuando me conecto a mi coneccion intenet are muy lenta ejecuto (cmd, netstat)

    Cuando me conecto a mi coneccion intenet are muy lenta ejecuto (cmd, netstat) to see how many coneccione tenco activas y me salen UN monto y eso no correcto're are as esta conectado el domen movil solo y solo tengo el navegador abierto, none descarga

  • Internal error backup 0 x 80070424

    Hello For some reason, the Vista backup uninstalled from the backup and Restore Center. I had a scheduled job and now I get a pop-up showing the service not installed internal not error 0 x 80070424. How can I repair/reinstall Vista Backup? Thank you

  • SyncServer has stopped working

    After iTunes updated to 9.1, I get this error message "SyncServer has stopped working". I tried to reinstall iTunes, I did a system restore to before the update and no solution worked.

  • WHEN I DIAGNOSE MEMORY MODULE IT SHOWS A FAILURE ID PG93LW-5 P 7644-MFH15F - 405S 03

    HP Pavilion DV6-6165tx Windows 7 Home premium (64-bit) I replaced a 4 GB of DDR3 ram just 2 days ago because the RAM is faulty and now, when any game the it shows memory blue dump screen and when I diagnose HARD drive module and memory diagnosis syst