Thunderbird is download Trojan horses to \AppData\Local\Temp\nsmail.tmp?

I use Thunderbird on Win 8.1, 64 bit, Windows Defender and EMET. When I'm mischievous looking for emails (some with attachments) I do not open, but transmit to us - cert.gov and UCE.GOV reports e-mail addresses. I am emails in the mode display only text. I run a virus scan afterwards and detection has been coming for Trojan horses in container file C:\Users\ < username > \AppData\Local\Temp\nsmail.tmp, usually with a .scr extension file (as shown in the output of information Defender). An infected file is downloaded on my computer for the operations of Thunderbird? Is - this benign file until the opening? I was under the impression that it's just passed the folder from the server. Can anyone tell/explain about this? Thank you in advance!

SCR files are Windows screensavers. Them are executable files and run and are processed by Windows exactly one. EXE file.

The only risk they represent for you is if you actually run the attachment (Thunderbird cannot do it alone)

The location of the file is where emails are assembled in an e-mail to be sent. The same location and name is used for each mail.

There is no point sending such things for the U.S. Government or anyone else, unless they specifically ask for it. I'm sure you've heard of made massive data capture the NSA. They probably already have your email address, but more to the point, Government and business of cyber security as symantec, kaspersky labs, eset and the folk music of more black hat is all skimming data flowing around the internet. This is how they seem to be able to issue a definition of virus before getting a sample.

Tags: Thunderbird

Similar Questions

  • C:\Users\Rext\AppData\Local\Temp\nsmail.tmp

    Unable to find the temp dir, or if I do they are EMPTY! This was bugs me for some time, please help rex thompson

    If you are running both Windows Defender and Kaspersky at the same time, get rid of one. Two analyzers antivirus running at the same time will eventually cause problems.
    And don't let not your antivirus software analyzes the Thunderbird profile folder. Do not scan incoming and outgoing messages. Don't let it scan attachments to emails.

  • install problem - c:\users\ &lt; NAME &gt; \appdata\local\temp\7zS171C.tmp\setup.exe the dependency service or group was able to start

    I use Win 8. I recently uninstalled Firefox on C: and am looking to reinstall on F:

    I downloaded the installation package full https://www.mozilla.org/en-US/firefox/new/?utm_source=firefox-com & utm_medium = referral, but when I ran the installation package, I got a popup window after the extracted package:

    c:\Users\ < NAME > \appdata\local\temp\7zS171C.tmp\setup.exe
    The dependency service or group could not start

    Any ideas?

    You may need to temporarily disable your security software (antivirus).

  • C:\Windows\Minidump\Mini082813-01.dmp C:\Users\Angel\AppData\Local\Temp\WER-496863-0.sysdata.xml C:\Users\Angel\AppData\Local\Temp\WERA939.tmp.version.txt

    C:\Windows\Minidump\Mini082813-01.dmp
    C:\Users\Angel\AppData\Local\Temp\WER-496863-0.SysData.XML
    C:\Users\Angel\AppData\Local\Temp\WERA939.tmp.version.txt

    Jane doe00

    We need the DMP file because it contains the single record of the sequence of events that led to the accident, what drivers have been loaded, and what has been loaded.

    WE NEED AT LEAST TWO FILES DMP TO SPOT TRENDS AND TO CONFIRM THE DIAGNOSIS.
    You may be able to get the DMP files without crashing by booting in SafeMode (F8) with networking.
    If you are overclocking stop.  (chances are that if you are unsure if you are, you are not)
    To allow us to help you with symptoms BSOD on your computer, download the contents of your folder "\Windows\Minidump".
    The procedure:
    * Copy the contents of \Windows\Minidump to another location (temporary) somewhere on your machine.
    * Zip up the copy (compress)
    * Please download to a service like Skydrive or "Rapidshare" to share files and put a link to them in your answer.
    Link to find out how to download below.
    To ensure the minidumps are enabled:
    * Click Start, in the search box, type: sysdm.cpl, press ENTER.
    * On the Advanced tab, click Startup and recovery... Settings button.
    * Make sure that automatically restart is unchecked.
    * Under the writing debugging information header, select image partial memory (256 KB) in the list box drop-down (varies from 256kb).
    * Ensure to that small Dump Directory is listed as % systemroot%\Minidump.
    * OK your way out.
    * Reboot if changes have been made.
    Please also run MSinfo32 and download the output as well.
    To run MSinfo32 please go to start > run > MSinfo32
    Go to 'file', 'save' and download the PDF is saved with the DMP
    System specs are extremely useful then please include everything you know.

    Blue screen view and that crashed are often wrong and should only be used in case of emergency...

    You can learn more about BSOD here
    You will learn how to test your memory here 


    Team Zigzag3143.com  
  • (AppData\Local\Temp\WER5E93.tmp.version.txt) what it means

    AppData\Local\Temp\WER5E93.tmp.version.txt
    What means?
    and tThe too... AppData\Local\Temp\WER-72992-0.sysdata.xml
    cause turn in blue and apear this
    Thank you

    Hi arielle,.

    1. when exactly are you getting this?

    2. are you able to boot into normal mode?

    3. What do you mean when you say Tower in blue and it appears? You get any blue screen error?

    You can download the crash dump file to get a better understanding of the issue that you are facing. Visit the link mentioned on how to do so below.

    Use SkyDrive download collected files and post screen shot/image

    You can also check if there is information in Event Viewer which may help us to solve the problem:

    What are the information contained in the logs of the event (Event Viewer)?

  • State - "C:\Users\Owner\AppData\Local\Temp\7zS19ED\setup\Status\" error message

    Whenever I start my pc or the re-booting I get "C:\Users\Owner\AppData\Local\Temp\7zS19ED\setup\Status\".
    ". How can the world I get rid of this error? I tried the option of restoration which is not good.

    Hello

    It's probably the surplus of a facility or a sort of a utility routine that
    It could be malware.

    Cannot find this file/folder on Google so you probably dodged some malware and you should
    do a very thorough control. Message on how to remove the error message if still it y
    After the audits of malware.

    No one program cannot be used to detect and remove any malware. Added that often
    easy to detect malicious software often comes with a much harder to detect and remove the
    payload. So its best to be now too thorough than paying the high price later. Check
    with an extreme overdose point and then run the cleaning only when you are very
    that the system is clean.

    It can be made repeatedly in Mode safe - F8 tap you start, however, you should
    also run in regular Windows when you can.

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
    (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    Microsoft Malicious removal tool - 64 bit
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with the other security
    programs. It is a single scanner, VERY EFFICIENT, if it finds something come back here or
    Use Google to see how to remove.
    http://www.prevx.com/   <-->
    http://info.prevx.com/downloadcsi.asp  <-->

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).
    http://www.SurfRight.nl/en/hitmanpro

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    http://www.eset.com/onlinescan/

    New Vista and Windows 7 version
    http://OneCare.live.com/site/en-us/Center/whatsnew.htm

    Original version
    http://OneCare.live.com/site/en-us/default.htm

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing system
    files.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type this into the search-> find COMMAND to top box and RIGHT CLICK-
    RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker
    (SFC.exe) program generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Run checkdisk - schedule it to run at the next startup, then apply OK your way out then
    turn it back on.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    I hope this helps.

    Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.

  • Get rid of the Users\Owner\AppData\Local\Temp\7z1A95\setup\Status message at startup

    When I turn on my computer, I always get an error message several times that Windows Installer is looking for Users\Owner\AppData\Local\Temp\7z1A95\setup\Status and I have to cancel several times to get out of this before it will go away.  What can I do to get rid of this annoying message

    Hello

    Use these methods to remove the error message.

    How to troubleshoot a problem by performing a clean boot in Windows Vista
    http://support.Microsoft.com/kb/929135
    How to check and change Vista startup programs
    http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

    Autoruns - free - see what programs are configured so that it starts automatically when your system
    boots and you login. Autoruns shows you the full list of registry and file locations where
    applications can configure Auto-start settings.
    http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx
    =========================================

    If you need search malware here's my recommendations - they will allow you to
    scrutiny and the withdrawal without ending up with a load of spyware programs running
    resident who can cause as many questions as the malware and may be more difficult to detect as the
    cause.

    No one program cannot be used to detect and remove any malware. Added that often easy
    to detect malicious software often comes with a much harder to detect and remove the payload. Then
    its best to be thorough than paying the high price later now too. Check with them to one
    extreme overkill point and then run the cleaning only when you are sure that the system is clean.

    It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
    the regular windows when you can.

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
    (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    Microsoft Malicious removal tool - 64 bit
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
    security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
    here or use Google to see how to remove.
    http://www.prevx.com/   <-->
    http://info.prevx.com/downloadcsi.asp  <-->

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).
    http://www.SurfRight.nl/en/hitmanpro

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    http://www.eset.com/onlinescan/

    http://OneCare.live.com/site/en-us/default.htm

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
    system files.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type this into the search-> find COMMAND to top box and RIGHT CLICK-
    RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker
    (SFC.exe) program generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    I hope this helps.

    Rob - bicycle - Mark Twain said it is good.

  • Impossible to load and use java corrupted c:\Users\AppData\Local\Temp\fx-runtime.exe

    How to fix c:\Users\AppData\Local\Temp\fx-runtime.exe

    Hi Bob,

    You have made any changes to your computer recently?

    I suggest you to follow the steps and check if it helps.

    Uninstall Java and install the latest version of Java and check if it helps.

    Step 1: Uninstalling Java.

    How to uninstall Java on my Windows computer?

    Step 2: Install the latest version of Java.

    Free download Java

    If the problem persists, contact support for Java and check if that helps.

    Support options

  • C:\Users\owner\AppData\Local\Temp\7XSrszHA.msi.part

    Can someone find and remove this so I can download stuff thanks C:\Users\owner\AppData\Local\Temp\7XSrszHA.msi.part

    E-mail address is removed from the privacy *.

    Hi BillyElliott,

    ·         You can find this file in this location?

    ·         What exactly happens when you try to delete?

    ·         You receive an error message?

    ·         How you earn this file to download on the Internet?

    ·         What web browser do you use?

    ·         You use Internet Explorer? If Yes, what version of Internet Explorer?

    The file you are trying to delete clears the cache file. This will remove cookies and other Internet related data.

    You can see the article for more information:

     

    Clear your Internet cookies

    http://Windows.Microsoft.com/en-us/Windows-Vista/delete-your-Internet-cookies

     

    I hope this helps.

  • When my computer starts message on the desktop is: "' Office impossible to load or run C:\Users\Ray\AppData\Local\Temp\ccrss.exe' specified in the registry" "

    "office impossible to load or run C:\Users\Ray\AppData\Local\Temp\ccrss.exe' specified in the registry."

    Make sure that the file exists on your computer or remove the reference to the registry. »

    Never had this message before. Sought a "registry". not been found. Looking for a 'Temp\ccrss.exe' not found.

    What should I do now?

    Hello

    1. for how long are you facing this problem?

    2. don't you make changes to your computer?

    I suggest you to follow the methods and check.

    Method 01:

    Step 01:

    Advanced, including safe mode startup options

    http://Windows.Microsoft.com/en-us/Windows7/advanced-startup-options-including-safe-mode

    Step 02:

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

    http://support.Microsoft.com/kb/929135

    Note: After a repair, be sure to set the computer to start as usual as mentioned in step 7 in the above article.

    Method 02:

    Adding to it, I suggest to run online virus scan and check if any malware or virus detected on the computer activity. You can run Microsoft safety scanner scanning from the link below: http://www.microsoft.com/security/scanner/en-us/default.aspx

    NOTE: Make sure that you select the correct version of the operating system before downloading the scanner)

  • When I start my laptop (running vista 32-bit) upward and the connection, get this error message "error loading c:\users\Appdata\Local\Temp\sshnas.dll".

    When I start my laptop (running vista 32-bit) upward and the connection, get this error message "error loading c:\users\Appdata\Local\Temp\sshnas.dll".

    Hello

    Download update and scan with the free version of malwarebytes anti-malware

    http://www.Malwarebytes.org/MBAM.php

    You can also download and run rkill to stop the process of problem before you download and scan with malwarebytes

    http://www.bleepingcomputer.com/download/anti-virus/rkill

    If it does not remove the problem and or work correctly in normal mode do work above in safe mode with networking

    Windows Vista

    Using the F8 method:

    1. Restart your computer.
    2. When the computer starts, you will see your computer hardware are listed. When you see this information begins to tap theF8 key repeatedly until you are presented with theBoot Options Advanced Windows Vista.
    3. Select the Safe Mode with networking with the arrow keys.
    4. Then press enter on your keyboard to start mode without failure of Vista.
    5. To start Windows, you'll be a typical logon screen. Connect to your computer and Vista goes into safe mode.
    6. Do whatever tasks you need and when you are done, reboot to return to normal mode.
  • Blue error screen - C:\Users\Thomas Family\AppData\Local\Temp\WER-59546-0.sysdata.xml__

    How can I get rid of this error on blue screen

    C:\Users\Thomas Family\AppData\Local\Temp\WER-59546-0.sysdata.xml

    Hello

    When exactly do you get the blue screen error?

    Check the error logs in the event viewer and post the logs here so that we can know exactly what is causing the problem.

    Event Viewer is a tool that displays detailed information about the events important (for example, programs that do not start as expected or updates are downloaded automatically)
    on your computer. The event viewer can be useful when troubleshooting problems and errors with Windows and other programs.

    For more information, see:
    What are the information contained in the logs of the event (Event Viewer)?

    Try using check disk utility to repair bad sectors on your hard drive.
    a. click on start
    b. type: CMD, according to the results, right-click CMD-> click 'run as administrator '.
    c. at the command prompt, type: chkdsk /r

    When you restart your system, your computer will be scanned for errors and will try to correct them.

    Note: When running chkdsk on the drive hard if bad sectors are found on the disk hard when chkdsk attempts to repair this area if all available on which data can be lost.

    In addition, you can consult the following link for more information:
    Check a drive for errors

    See also:
    http://Windows.Microsoft.com/en-us/Windows7/resolving-stop-blue-screen-errors-in-Windows-7

    Kind regards
    Afzal Taher - Microsoft technical support.
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Windows repeated error "Windows cannot find C:\Users\HP\AppData\Local\Temp\Install_30150\ins_sm.exe".

    Hi all

    I have a Windows 7 pc. Several times a day, an error message appears which States:

    "Windows cannot find C:\Users\HP\AppData\Local\Temp\Install_30150\ins_sm.exe. Make sure you typed the name correctly and then try again. "

    Changes in number (i.e. 30150) to each new error message.

    When I go into the Temp folder I find empty files called Install_30150, Install_21338 etc. I don't really know what makes these records and which try to run an executable file in them and finds that they are empty!

    Could you please help?

    Thank you very much in advance

    Angeliki

    (Moved to programs)

    Hi Elise,.

    The Temp folder in the location you can get the error is temporary. It stores temporary data when you access a Web site or when you download a file. You can delete this folder. Select all the files in the Temp folder and delete it.

    Let us try to check if you are facing this problem because of any third-party application. Attempt to start the clean boot of your computer state. To help resolve the error and other messages, you can start Windows by using a minimal set of drivers and startup programs. This type of boot is known as a "clean boot". A clean boot helps eliminate software conflicts.

    How to perform a clean boot in Windows

    http://support.Microsoft.com/kb/929135

    Note: Please refer to the section: How to reset the computer to start normally after a boot minimum troubleshooting section of Kb to start the computer to a normal startup after you fix the problem.

    Let us know the status of this issue.

  • I have a problem with c:\users\myname\appdata\local\temp.

    Hello

    c:\users\myname\appdata\local\temp

    I plan to delete ALL/SOME of the files that are in this directory (NOT the files).  One of my applications is broken, and I suspect that it continues in this way due to a forced down while running.

    I read on another thread that is not a good idea to touch the contents of this file, in particular the FOLDERS that are in this folder. Apparently, it causes problems for other applications. http://answers.Microsoft.com/en-us/Windows/Forum/Windows_7-files/deleted-files-in-userappdatalocaltemp-downloads/9dca1f8b-9d37-4a46-a0af-e1fce2662718

    I will only delete FILES after a certain date and WILL NOT affect the files.

    What do you think. This will cause me any grief?

    OK, back again.

    I solved my problem of system by doing a restore of the factory system.

    I got good advice on the above question, and there is no problem with the deletion of everything in this folder. This is something I do on a regular basis as the maintenance of the system.

  • C:\Users\Owner\AppData\Local\Temp\MSIMG32.dll is not designed to run on Windows or it contains an error.

    So I try to install this thing for this program called Mypublisher so that I can make a photo book... But it keeps giving me this message. The entire message is "C:\Users\Owner\AppData\Local\Temp\MSIMG32.dll is not designed to run on Windows or it contains an error. Try to install the program by using the original installation media or contact your system administrator or support software provider. "I've never used this program before so I don't know how I could use the original installation media. He also gave me this message when I tried to update quicktime, I think that's what it was. I have tried everything I can, but I'm not a computer genius so I don't know what to do to... Any help? Thank you!

    Original installation media means the Mypublisher cd or downloaded installation file

    Try their http://www.mypublisher.com/customerservice support

Maybe you are looking for

  • How do I remove the window of I/O?

    Hello world I send you a large number of packets of data through the USB port and whenever LabView bed or something written, I/O Windows appears. It is annoying me, is it possible to turn it off? Kind regards Pedro

  • Agilent 8648C control with Labview

    I download the driver 8648A http://sine.ni.com/apps/utf8/niid_web_display.model_page?p_model_id=533 and use it to control Agilent 8648 C. When I put initialize.vi to the application, the erroe 1223 meassage is shown and if I didn't put the initialize

  • Passport for blackBerry OS 10.3.1.2576 (SR 10.3.1.1779) now takes place on the Passport

    Hello I am aware that there is a new operating system deployment on a global scale, related to new passport firmware (OS 10.3.1.2576 / SR 10.3.1.1779) I'm in the United Kingdom, with an unlocked SIM device. Am on EE. Other UK users have posted (elsew

  • Can I get my key of Activation Windows 7 use count reset?

    I often re - install Windows 7 I have main regularly updated my system / re install so that a new installation (much faster)... Unfortunately, I recently started to get an error code saying I used my key too many times... I called Microsoft Customer

  • Auxiliary DNS works only on Windows Server 2003

    Hi allI use the windows Server 2003. I configured the DNS server for each server and active - it integrated, I get also DHCP server to distribute the auto IP to the customer, with prefer DNS and DNS auxiliary, but, I don't know why, when DNS prefer s