Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

JS/Nemucod found in inbox&trash file and can't clear it

  • 5 replies
  • 1 has this problem
  • 2 views
  • Last reply by Zbyszekg

more options

I'm testing from some time Thunderbird email client, and acidentally my antyvirus (MS System Center Endpoint Protection - SCEP) found old email with potential virus attached (I expected this thus never opened it), As late as on 2017-04-18 SCEP found it and suggested to remove it. Unfotunatelly without success. I found this email and deleted it manually. After that checked system against viruses again - SCEP from this time reports me that trojan is in two places - inbox and thrash. Different antiviruses dont see this treat (Symantec NPE, SpuHunter and ESET Node 32 - all trials). Pls help me to clarify situation and certainty that my system i clear. Regards Zbyszek PS screenshots attached (but in polish - as my system is localized in polish).

I'm testing from some time Thunderbird email client, and acidentally my antyvirus (MS System Center Endpoint Protection - SCEP) found old email with potential virus attached (I expected this thus never opened it), As late as on 2017-04-18 SCEP found it and suggested to remove it. Unfotunatelly without success. I found this email and deleted it manually. After that checked system against viruses again - SCEP from this time reports me that trojan is in two places - inbox and thrash. Different antiviruses dont see this treat (Symantec NPE, SpuHunter and ESET Node 32 - all trials). Pls help me to clarify situation and certainty that my system i clear. Regards Zbyszek PS screenshots attached (but in polish - as my system is localized in polish).
Attached screenshots

Chosen solution

Note that it is necessary to compact Trash after you Empty Trash, but if the infected message is still there, you could rebuild the Inbox by moving the messages from the wp.pl Inbox to a subfolder of Local Folders, then close TB and delete the Inbox mbox file and Inbox.msf from the .../Mail/pop3.wp.pl folder. Do the same with the Trash mbox file and Trash.msf. (Select Help/Troubleshooting Information, click Open Folder to open the profile folder, close TB, delete the files.) When you restart TB, it will automatically create a new, empty Inbox folder.

http://kb.mozillazine.org/Compacting_folders#Real_fix

Read this answer in context 👍 0

All Replies (5)

more options

In TB, a deleted message is really only marked as deleted in the Inbox and made invisible there, and visible in Trash. Compacting folders permanently removes the message from the computer, so I suggest you Empty Trash and compact Trash and Inbox, then run the scanner and see if it still finds the trojan.

http://kb.mozillazine.org/Undelete_a_message

more options

Thanks, for proposal, but didn't work. Maybe some other suggestions? After compacting, updated SCEP and started it again. Effect is the same, SCEP shows that trojan stil is in both places.

more options
more options

Chosen Solution

Note that it is necessary to compact Trash after you Empty Trash, but if the infected message is still there, you could rebuild the Inbox by moving the messages from the wp.pl Inbox to a subfolder of Local Folders, then close TB and delete the Inbox mbox file and Inbox.msf from the .../Mail/pop3.wp.pl folder. Do the same with the Trash mbox file and Trash.msf. (Select Help/Troubleshooting Information, click Open Folder to open the profile folder, close TB, delete the files.) When you restart TB, it will automatically create a new, empty Inbox folder.

http://kb.mozillazine.org/Compacting_folders#Real_fix

more options

thanks - it helped