Endpoint Protection

 View Only

  • 1.  Deleted Thunderbird inbox after SEP full scan

    Posted Aug 23, 2017 04:22 AM

     

     

      Hi all,

      We have installed Symantec Endpoint Protection Manager 14 MP2 in our corporate network. During last night's scheduled full scan, SEP client found a suspicious mails on one of the computers. This morning after we closed SEPs information popup windows, thunderbird suddenly crashed. After the next start of the program, we saw that not all mails are present and after we've checked the file location, found that the inbox file is too small. We realize that this "new" inbox contains only mails from this morning, but not the older ones. There were no records that the old inbox file was deleted in "Risk logs" on the local SEP client. Only in Windows application log we found information that the inbox file was successfully deleted (Security Risk Found! JS.Downloader.D in File: PATH\inbox  by: Scheduled scan. Action: Cleaned by Deletion.  Action Description: The file was deleted successfully.).  

     Is there any method so we can restore the old inbox?

     

     

    Thanks in advance!

     



  • 2.  RE: Deleted Thunderbird inbox after SEP full scan

    Posted Aug 23, 2017 06:40 AM

    You're best checking the support forum for Thunderbird for additional advice. If it was only quarantined than you could simply restore it. Otherwise SEP has permanently deleted it and it cannot be restored unless you have a prior backup.