Thunderbird Mail: Do I need Worry?

[gkar]

Hi,

I have recently been experiencing multiple "mail delivery failed: returning message to sender" emails. I'm not sure where they have come from, they are not contacts I have ever used or known. It is only happening on one of my multiple addresses: the one I primarily use. I don't use this address for registering to any website/forum I have ANY doubts about. Obviously, I have run a couple of full scans with Malwarebytes, which show no issues. What else should I do in the interim?

I am not enough of a PC whizz to know if this is a virus, & Malwarebytes is only doing it's job in preventing them from being sent. Or if it is an issue directly with Mozilla Thunderbird.

Any assistance in directing me to the right path of curing this concern would be greatly appreciated. Thanks.

[Durew]

Hi gkar,

When I get such messages it is from my e-mail provider. Generally because I try to mail something to a non-exsistant mail-adres. (Mostly due to typo's).
Could this be the cause of your problem?

Regards,
Durew

[gkar]

Thanks for the reply.

The email addresses are not anywhere near what I could mistype. Plus, the numbers I am getting them in are too great for any errors at my end; at least, by my own hand.

Am wondering if I should do an online scan to confirm no problems locally.

[Durew]

Hi gkar,

Now you mention it, a piece of malware could send messages without your knowledge, so checking for an infection wouldn't be a bad idea..

If you want to make sure you are not infected I'd recommend turning to the malware removal part of this forum. It deals with "am I infected?"-questions as well. I advise to read this post first, it explains what steps to take before posting. That way everything runs more smoothly.
If they give a clean bill of health you're good. It would give me more confidence than yet another anti-malware/virus scan.

I hope this helps.

Regards,
Durew

 

[gkar]

Hi Durew,

I have completed an online virus scan, using Trendmicro Housecall. It tool an age to do a full scan of my system. It found [allegedly] 4 viruses -all variants of troj_ge (2x troj_ge.93681AA2 & troj_ge.EDB1BB32). I say allegedly because it appears the 2 former were in a temp folder formed with files during the Housecall scanner install. The other 2 have been on my system for years. They are to do with Mediaportal -HTPC frontend. The SAF key used to register a a virus, with Avast free some years ago, but proved to be a false positive. Malwarebytes shows none of the files to be infected.

So...who is right? Malwarebytes or Housecall? I have included some jpgs taken of the issues as presented. I have also included result logs of the Farbar Recovery Scan Tool & HiJackThis. Just to reaffirm, I did NOT click on any of the links inside any of these emails.

If I need to start a new thread in the relevant forum let me know, as I don't want to do multiples posts. Thanks.

Regards,

John

Addition.txt

FRST.txt

hijackthis.log

Edited April 25, 2017 by gkar

[exile360]

Greetings

Yeah, those definitely look like FPs (False Positives) to me and I'm pretty sure they were hit with generic/heuristics defs anyway judging by the names used by Trend.

As for the rest, if you do wish to make absolutely certain that your system is clear of any possible threats then all you need to do is follow the instructions posted here and simply create a new thread in that area with the requested info/logs from that pinned topic.  One of our malware removal specialists will work with you one-on-one to check your system and clear it of any malware and/or PUPs that might be present.