I also use Thunderbird, and Avast Free 2015.10.2.2215. I get [SUSPECTED SPAM] inserted into the subject line of occasional emails, have done for ages. However of several different email accounts, it happens only with email arriving via my ISP’s email server. I think it’s fair to conclude it’s being done by my ISP’s spam filters.