The bodies of my emails are deleted

Oleg

Hi, I have just started using Bitdefender, I started with a full scan and it came up with email Trojans and so forth, I chose delete.  When I went back to my email they were all listed however clicking on them showed that ALL the emails were flag and All the content was deleted.  It's a POP account so I have them on my phone , the other computer and they are still on the server so not a big problem.

Why did it flag all of them and what can I do to ensure it doesn't happen again?

Thanks

Roxana G

Hello Oleg,

Please check if the .pst file is in Bitdefender quarantine:

- open Bitdefender

- click on Protection

- under Antivirus, click on Quarantine

In case the .pst archive is in Quarantine, please click on Recover and check if the issue is solved. Let us know how it goes.

Oleg

No there is not, just one file labeled a Trojan.  This was satisfactorily resolved using these replies.

These came from a a Thunderbird thread I placed, sorry I didn't respond to your previous email, I confused the two.  If there is a way to effectively scan emails without the copy and paste to the desktop I would appreciate knowing how.

 

"If you allowed the Anti-Virus to 'fix' the problem, then it would have deleted the entire file containing emails because AV products do not understand the mbox file contains more than one email. It would not have deleted the indexing file and so you would now see headers to emails that do not exist. Hence no body.

To fix the index:

• 
  Right click on folder and select 'Properties'
  
• 
  click on 'Repair Folder'
  
• 
  click on 'OK'
  

This will create a new index file for that folder which will show you the real contents of that folder. Fixing the index does not delete emails.

If the AV product has only quarrantined the file then try restoring it.

If this is a 'Pop' mail account and you have kept a copy of email in server Inbox: In Thunderbird

• 
  'Help' > 'TRoubleshooting information'
  
• 
  click on 'Open folder' button
  

A new window opens showing the contents of you profile name folder.

• 
  Exit Thunderbird now - this is important.
  

• 
  click on 'Mail' folder
  
• 
  click on pop mail account name folder.
  
• 
  delete the 'popstate.dat' file
  

The popstate.dat' file keeps a record of what has been downloaded so preventing redownloading emails.

• 
  Start Thunderbird
  

A new popstate.dat file is created and emails in server Inbox will begin to get downloaded.

If this is an imap mail account: Logon to webmail account via a browser and see if emails have been removed from server. If no emails on server, then you will need to use your last backup and an addon called 'ImportExportTools' to import mbox files back into 'Local Folders' mail account and then try to copy them back into the imap mail account folders to put them back on the server. ImportExportTools addon: https://addons.thunderbird.net/en-US/thunderbird/addon/importexporttools/"

 

 

And this one

 

 

"For future reference, I use this method to locate identity of a bad email so that AV does not mess with the files in Thunderbird profile folders.

If AV says there is a bad email, do not allow AV to fix it.

• 
  Create folder on desktop called 'TB-Emails'
  
• 
  Highlight emails in a folder (Ctrl+A will hightlight all)
  
• 
  Right click on highlighted emails and use 'Save as'.
  
• 
  Save emails as .eml files in the 'TB-Emails' folder.
  

Each email will now be saved as a separate file.

• 
  Use AV to scan 'TB-Emails' folder. It will locate which email(s) are bad and only fix those bad emails.
  
• 
  Then you can locate that email in Thunderbird and delete it.
  
• 
  Empty the 'Trash' folder
  
• 
  Right click on folder and select 'Compact' to fully remove the deleted but hidden email.
  
• 
  Then delete the contents of the 'TB-Emails' folder and empty the 'Recycle Bin' "
  

Thanks

Chris

 

Roxana G

Hello, 

Thank you for the details.

Another way is if an email is detected, you can remove the emails by the subject. You can search the email in your email client and remove them.