One or more unexpected DLL files were found in the same directory as K:\PortableApps\ThunderbirdPortable\ThunderbirdPortable.exe. This could be an indication of a covert attempt to hijack the application using DLL injection. Please check the application before using it.
I have Kaspersky and Malware scanned the directory with a negative result.
What do I do next since I cannot load Thunderrbird.
You are here
Thunderbird unexpected DLLs message
March 16, 2017 - 2:55pm
#1
Thunderbird unexpected DLLs message
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on Facebook
Follow us on LinkedIn
Follow us on Twitter
Follow us on Mastodon
Follow us on BlueSky
Open up K:\PortableApps\ThunderbirdPortable in Windows Explorer and tell us what DLLs you see there. There shouldn't be any.
For full background on the possible hijack issue and the Platform's scanning and mitigation of it, see here: https://portableapps.com/news/2017-03-13--mitigating-dll-hijacks-with-th...
Note that ThunderbirdPortable.exe is not vulnerable to any known DLL hijack issues. The alert shows despite that because in some apps the working directory of the launcher is scanned by some vulnerable parts of the app itself and it can be hijacked that way.
Sometimes, the impossible can become possible, if you're awesome!
John
Many thanks for your comments. I have opened the directory and there were 31dll's sitting there.
I have listed them below.
AccessibleMarshal
Breakpadinjector
D3DCompiler_43
freebl3
gkmedias
libEGL
libGLESv2
MapiProxy
MapiProxy_InUse
Mozalloc
Mozglue
Mozjs
mozMapi32
mozMapi32_InUse
mozsqlite3
msvcp100
msvcr100
nsldap32v60
nsldappr32v60
nsldif32v60
nspr4
nss3
nssckbi
nssdbm3
nssutil3
plc4
plds4
smime3
softokn3
ssl3
xul
I would be grateful for any comments/help you may be able to offer.
Best regards
Graeme.
graymac
It appears you've gone deeper than requested.
Note that John asked for any DLLs in X:\PortableApps\ThunderbirdPortable, not X:\PortableApps\ThunderbirdPortable\App\Thunderbird or elsewhere within the application structure.
Hi Gord
The list of 31 DLL's are those in the X:\PortableApps\ThunderbirdPortable directory. In the X:\PortableApps\ThunderbirdPortable\App\Thunderbird directory I have 26 DLL's which are mainly the same as the 31 listing but some are not in the "31" group.
I have moved all of the "31" group to a blind directory and Thunderbird now loads with no queries but I would still like to know how they landed in this place.
Regards
Graeme
graymac
In that case, I advise doing a clean install of Thunderbird, saving your X:\PortableApps\ThunderbirdPortable\Data directory prior to doing so, and copying it into the clean copy once installed.