Avast and Thunderbird: So WHERE is the "suspicious" attachment

Avast detected a “suspicious attachment” in an email downloaded with Thunderbird and apparently deleted the original email and replaced it with the warning “email”. I use pop3 and delete emails from the server once downloaded so the original is not on the server anymore.

I know for certain that the attachment is not a virus. I want to get the attachment.

Where is it? It’s not in the virus chest. Is it gone forever? That’s really, really bad design on Avast’s part if so.

Thanks,

Kevin.

That depends on your settings for Mail-Shield. (I’d set it to “Ask”)

It was set to “move to chest” and “if actions fails, delete.”

I guess it’s lost forever.

Why would something as simple as “moving to chest” fail? Why would “delete” be the default action then? The sender is an elderly person I am trying to help and I hate to annoy him with sending it again or sending it as a zip file.

I think those defaults (only accessible under “expert settings”) are a bad, bad choice.

Kevin.

Yes, it is.

It may not be gone forever. It depends on how Avast deleted it, and how well it deleted it.

All of your Emails are stored in your Profile Folder in Thunderbird, even the ones deleted from Trash.

Click on the Help tab in Thunderbird, then click on Troubleshooting Information.

Under Application Basics, look for Profile Folder, and click on show folder.

You should see your Mail folder, open it and click on the Trash file, not the Trash Folder, and open it in Word Pad.

This file could be huge, depending on how long you have been using Thunderbird, and could take a long time to load.

If you do find the Email, it will have full headers. Scroll to the top of the header, and change the number after X-Mozilla-Status to 0.

Save the file. When you close it, you will be asked if you want to save it. Click Yes.

The Email should appear in your Inbox.

Attachment Below: