Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Possible Security Issue Thunderbird Installation

  • 1 reply
  • 1 has this problem
  • 1 view
  • Last reply by Matt

BDSchnoo
BDSchnoo
more options

Downloaded file "Thunderbird Setup 78.10.2.exe" on 19 May 2021 from https://www.thunderbird.net/en-US/ File checksums: MD5: be926861eb074b88a83b5126c94441f9 SHA256: 5edd968473f5dca86702d80238a3d6d63bb7633d62c82f8eb572830bf60580d6

Installed Thunderbird on a Windows 10 system, filled in requested email account information, and when Thunderbird was configuring the account, received a Norton 360 Alert: Web Attack Rig Exploit Kit Redirection 13 from http://findresults.site//?rpid=2PO5N5455, Intrusion attempt by 103.224.182.251, 80 was blocked.

Ran a full system scan with Norton 360, uninstalled Thunderbird, installed Malwarebytes and scanned system. No security issues found.

Don't know if the timing of the intrusion attempt was a coincidence or if there might be a security issue with Thunderbird installation.

Downloaded file "Thunderbird Setup 78.10.2.exe" on 19 May 2021 from https://www.thunderbird.net/en-US/ File checksums: MD5: be926861eb074b88a83b5126c94441f9 SHA256: 5edd968473f5dca86702d80238a3d6d63bb7633d62c82f8eb572830bf60580d6 Installed Thunderbird on a Windows 10 system, filled in requested email account information, and when Thunderbird was configuring the account, received a Norton 360 Alert: Web Attack Rig Exploit Kit Redirection 13 from http://findresults.site//?rpid=2PO5N5455, Intrusion attempt by 103.224.182.251, 80 was blocked. Ran a full system scan with Norton 360, uninstalled Thunderbird, installed Malwarebytes and scanned system. No security issues found. Don't know if the timing of the intrusion attempt was a coincidence or if there might be a security issue with Thunderbird installation.

All Replies (1)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

I personally uninstalled Nortons products about 2003 and have not gone back because they were not serious about security only about false positives and flashing red alerts.

Given the source IP is a hosting company and there are some 35,817 web sites hosted on the domain https://ipinfo.io/103.224.182.251 and the Alert is about a web redirect I would say that the issue you experiences has zero association with the Thunderbird install.