273969 - worm/netsky.x virus infects the inbox directly when receiving the infected file

Status: RESOLVED DUPLICATE of bug 116443

(Thunderbird :: Mail Window Front End, defect)

Description

[flix]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

windows xp sp2, antivir latest edition of course... the worm/netsky.x has no
effect and will be deleted when using outlook express, but when receiving an
infected mail in thunderbird the worm/netsky.x infects  both the inbox files
immediately, I do not have to touch the mail at all. this results in total loss
of all the files in the inbox... 
I tried many various different preferences, but somehow thunderbird seems to
open only this tipe of worm automaticly on the "get mail" command. all the other
viruses get destroyed quite perfectly and do not open at all. I receive quite a
lot of virus-packed mails so I'm pretty shure the virus scanner is doing his job
and as the problem does not occur with outlook  I was wondering if it could be a
very annoying bug.

Reproducible: Always
Steps to Reproduce:
1.download virusscanner http://www.free-av.com/ or
http://www.avup.de/personal/en/avwinsfx.exe
2.install thunderbird
3.receive the worm/netsky.x virus in the inbox

Actual Results:  
normal infected mails are being trashed or placed in the junk folder

Expected Results:  
move the worm to the trash can or delete it

Comment 1

[Matthias Versen [:Matti]]

Mozilla (and Thunderbird) use one single file for each mailfolder. If you
receive a mail with a virus, the stupid anti-virus trashes the whole inbox file
with all mails.

"I'm pretty shure the virus scanner is doing his job
and as the problem does not occur with outlook  "

Did you test other mailsoftware that use mbox-databse for mails ?
Don't assume that something is correct if it works in Outlook or IE.

Suggested workaround: 
USe a Antivirus Software that does use a pop3 Proxy for scanning mails.




*** This bug has been marked as a duplicate of 116443 ***