4.2/Thunderbird craziness

4.2/Thunderbird Ver3 craziness/loop

I'd been running 4.0.474.0 for some time without any issue, but decided to try the 4.2 beta as it's supposed to integrate with Thunderbird (I realize the older version still scans incoming traffic). After install I had no immediate issues, however the next email I got repeated 3 times (both within gmail folder in Thunderbird and to by Blackberry).

Every email after that did the exact same thing, 3 of the same. Today after messing with my gmail settings - just turned pop on and off - I tested with another email to myself, and ended up with over 400 copies of the same email in about 10mins (my BB wasn't pleased). I obviously didn't check all of them, but many had the "checked by nod32" signature on them multiple times.

Uninstalled the beta, reinstalled 4.0.474.0 and no longer have any of those issues. I may be a one off case here as I haven't seen anyone else post with issues, but this seems to possibly be a bug.

This is on Win7 X64 Ultimate, fairly fresh install, only other "security" software is Malwarebytes, not resident just set for weekly scans.

 

Which version of Tb you have used?
How do you receive messages (over POP/IMAP)?

 

Version 3, and I receive via imap. Even within gmail (check for the hell of it) there were that many emails, so it seems like it was doing something rather funky when it was scanning, almost seemed to be stuck in a loop. I did close/reopen TB, removed/re-added the mail account, even restarted just to try it, same thing every time.

I've been running .474. for a while now and haven't had the issue occur again.

 

Have you migrated your profile from Tb2 to Tb3 or have you started from new empty profile for TB3?

 

I migrated everything a couple months ago when it was still in beta. I recently formatted/install Win7 but I backed up/restored my profile. Though again, I haven't had this issue before except when running the beta.

 

What do you have installed (EAV/ESS) ?
Have you had enabled following option in TB2 ( Account Settings > Offline & Disk Space > Make the messages in my Inbox available when I am working offline )?


Sorry for a lot of question. I'm gathering necessary information to reproduce this issue at ESET.

 

I use EAV. I use TB3 so perhaps the options are a little different, but yea the emails are stored locally for all 3 of my accounts that use IMAP. It's been that way since I set it up quite a while back.

Not a worry about the questions, I'll give you all the info I can.

 

Hello, I'm jumping into this thread because I have one similar problem.
I'm using thunderbird3, local synchronisation enable, three imap accounts, and Nod32 AV 4.2.22. (previous release were not supporting TB3)

First problem: I can now see every mail scanned by Nod32 because it's duplicated then removed from my inbox.
For exemple, if I got 10 new mail, I can see each of them duplicate then deleted.
It make navigation hard because mail listing is always moving when NOD is scanning.

Second problem: On the Trash folder, I got one viagra mail that jump into this insane "duplicate -> delete mail" loop, without ending

 

Suggestion for Thunderbird3 engine:

- scan imap mail data from local cache instead of live server
- do not display one duplicate mail during scan process

 

Please can you copy paste of server name of your gmail account
Tools > Account Settings > Server Settings > Server name (Is it imap.gmail.com or something different?).

In case of EAV, I think you can avoid of all write issues by turning off delivery scan. Message will be scanned at the moment when you read it by on read scan. On read scan writes changes to server only in case of infiltration.

 

With my own mail serveur (www.surgemail.com - latest linux version): duplication then delete of every scanned email.
With the gmail imap serveur: disappearance then display of every scanned email.
In both case: mail listing is always moving, making navigation difficult

About EAV, I removed the check of "Received Email" in Email Client option (see screenshot), since then, the (duplicate/delete) behaviour on new emails have disapeared.
Anyway, won't it be a security flaw if I'm using this option ?
What about other mail client like outlook ? (I'm using both client)

note: I can always see the (duplicate/delete) behavior when I'm right clicking on any mail and ask for rescan message.

 

When we scan message we have to write some information into it.
Unfortunately there isn't possibility to modify content of original message on IMAP over client. Therefore we have to create a new message, upload it and if everything went ok delete original message. For a moment original message is deleted you can see you have duplicated email or if delete of original message fails for some reason.

>won't it be a security flaw if I'm using this option ?
If read scan is enabled then it isn't. Message is always scanned before it is going to be displayed.

>I can always see the (duplicate/delete) behavior when I'm right clicking on any mail and ask for rescan message.
It is because of message processing i described above.

 

Good to know.
To be sure, you confirm that settings displayed in my screenshot made EAV scan email before I read them ?
I'm afraid that "Unread mail" won't be scanned with current settings.

This process seem logic, it's thunderbird3 internal engine who's displaying those email.
How did you manage to not have this behaviour on Thunderbird2 and Outlook ?

 

Hi again, do you know the answer of this question ?

 

Yes, i thing is ok.

 

Thanks