Personal tools

Thunderbird:Testing:Antivirus Related Performance Issues

From MozillaWiki

Jump to: navigation, search

Contents

  

Please add information about your experience with antivirus software (create a wiki account, and select edit).

Disclaimer: Problems may occur that are not listed here, which is why we ask you to add your experience. The information here is anecdotal based on personal experiences, not based on an organized battery of testing.


Related Articles


Symptoms

Typically, mild to severe performance problems.


WARNING: Your AV software working for a previous version of Thunderbird ... doesn't mean it works properly now with a newer Thunderbird. And, if Thunderbird is the only software affected ... it doesn't mean the problem can't be caused by antivirus. You must explicitly test by disable/enable of AV to determine the effect on Thunderbird. Example problem areas:

Problem Antivirus and Anti-Malware Packages

To test if the Antivirus and Anti-Malware software is causing a problem, disable it temporarily. For permanent solution of the problem you may need to disable parts of the software, change to different software, or exclude folder locations from scanning, which typically will be %appdata%\thunderbird\profiles **However, if you altered Thunderbird accounts to put mail somewhere on disk other than the standard profile location, you will need to also exclude those nonstandard locations.

Problems have been reported with:

  • AdAware [1]
  • AGNITUM Security Suite Pro [2]
  • AGNITUM Outpost firewall [3]
  • AVAST Free Antivirus 2014 ed
  • Avira antivirus [4] (slow), [5] (blocks compact)
  • Bitdefender [6] (solved by reinstalling BD)
  • BullGuard bug 537769 and [7] (see BullGuard solution below)
  • Emsisoft Anti-Malware, Guard option [8]; Nov2010 TB and Emsisoft forum post indicates slowness may have been around since TB 3 days
  • Emsisoft Online Armor firewall - thunderbird must be set as a "trusted" program [9] [10]
  • Eset NOD32 bug 541197 (Bug report), [getsatisfaction report]
    Repeated attempts to create huge temporary file during message synchronization due to Eset NOD32 causes slow gloda indexing
  • F-Prot (see Solution for F-Prot Antivirus below)
  • Kaspersky [11]
  • Malaware free AV [12]
  • McAfee bug 544684 shutdown hang, slow startup
  • Microsoft Security Essentials aka MSE (Settings | Excluded Files & Folders | add your profile folder, typically c:\users\-your-user-name-\appdata\roaming\thunderbird **) [13] [14] [15] [16] [17] [18] bug 621083 Bug 839908
  • Panda Cloud Anti Virus Free v 2. Installed but it interfered with sending emails. Thunderbird v 24.3.0 said it could not access the temp directory although the outgoing emails were there. Thus the mail was not sent. No apparent tweaks worked. When Panda uninstalled, Thunderbird was back to normal.
  • pctools internet security 2011 bug 610106
  • Secunia PSI [19] (User Contributed Notes)
    • as of January 11, 2012,by default Secunia PS 2.0 forces an update to English rather than localized Thunderbird ; WORKAROUND from secunia: "To change this, the user can double-click the program entry in the Scan Results and then choose the preferred language in the drop-down menu. We are aware that this approach may not be the most intuitive for our users and we are currently treating it as a bug. I have taken the freedom to quote your email to "bump up" our bug report and I have also raised the severity of the bug."
  • Sophos [20] - Instructions for Sophos (untested)
  • Spamfighter - due to a possible bug in Spamfighter (like Kaspersky it's not following the rules for Thunderbird add-ons), after each 3.1 upgrade you have to repair it or reinstall it; GS1, GS2 (see Spamfighter solution below)
  • Symantec Norton Antivirus. [21] [22] [23] (Exclusion instructions required, please add)
  • THE SHIELD bug 542156 (Bug report)
  • Symantec Norton Security Suite/NSS (offered through Comcast) *firewall* caused crash bug 598662 (Bug report)
  • Virusbuster [getsatisfaction report]
  • Web Sweeper bug 534823 (Bug report)
  • Trend Micro Instructions to exclude, getsatisfaction report, bug 534823 (Bug report)
  • (Others wanted, please add)

Also, several products have caused pop download errors or slowness if incoming mail is scanned [24]

Unaffected Antivrus Packages

The following programs have generally been observed as working well with Thunderbird (but not proof that these products can't have problems):

  • AVG Antivirus - (revised) from [25] "[AVG] are no longer going to support the Thunderbird plugin because of the frequent updates of Thunderbird." And you may see problems with older versions (like 9.0.830). AVG may cause slow downloading of pop mail [26]. and AVG 9.0 may slow down sending with TB 3.1.x if set to scan outgoing messages) [27].
  • ANTIVIR 9 seems to work with Thunderbird 3 - from klint: "ANTIVIR 9 (Free version) runs fine, but ... there is no specific MAIL protection activated in the free version I have. I'm using the global protection to protect me from anything that could be launched from a mail."
  • (Others wanted, please add)

Solutions for Antivirus Software

McAfee

McAfee has had major problems with Thunderbird 24.0.1 and prior releases causing crashes and poor performance, "Not Responding", "Unresponsive Script", etc. For example (GS, bug 592303). We recommend you do all of the following:

  • Disable/delete McAfee Anti-Spam Thunderbird Extension in Tools | Addons | Extensions(It is safe to remove, and is absolutely not needed for good virus protection)
  • Disable email attachment scanning (it individually scans all emails which slows down Thunderbird) - Uncheck Email attachments under Real Time Scanning > Settings > Scan these attachments and locations
  • Disable scanning of Thunderbird files and folders (by default McAfee is NOT supposed to scan them):
    1. Right click on systray icon
    2. "On-Access Scan properties ..."
    3. "All processes", "Exclusions"
    4. "Exclusions ..."
    5. Add the "Thunderbird" and "Thunderbird Profile" folders and subfolders. Folder names must finish with a backslash. Also, if you have customized account locations for mail, exclude your custom folder locations.
  • Write/Call McAfee support to inform them of your difficulty

If all above options fail, you may need to remove/replace McAfee.

NOTES:

  • Even with the above changes disabling various features you ARE still protected from viruses by McAfee's other protection features. (quote from McAfee) "you do not need to worry, as the Real Time Scan is [still] turned on it will scan all the files and attachments and will alert you if there is any infection."
  • But you know Thunderbird worked fine for years, with product X (eg McAfee). Until now. So isn't the recent breakage a problem in Thunderbird? Answer: No, typically not. In general software terms, an unchanged product X can to do bad things to product Y. And products like antivirus and firewalls are often tightly coupled to details in the software (eg Thunderbird) they are trying to protect or control - and that also makes them susceptible to breakage or incompatibility from said updates. It is therefore the case that it's up to product X's responsibility to fix the problem.

F-Prot Antivirus

Thunderbird 3.0.1 was painfully slow for me on my 2.4 GHz core 2 duo until I took the following steps:

Disabled Global Indexing:

  1. Click “Tools” menu
  2. Click “Options...” menu item
  3. Click “Advanced” tab
    4) Uncheck “Enabled Global Search and Indexer”

Add a special exclusion to Antivirus software that covers the directory in the profile where TB stores its mailbox files. In my case the software was F-Prot so the steps were:

  1. Open F-Prot Interface
  2. Click “Virus Scanners”
  3. Click “Exclusions” under the advanced heading
  4. Click “Folder...”
  5. Type “C:\Users\$Username$\AppData\Roaming\Thunderbird”
  6. Check “Also include subfolders”
  7. Click “OK”

Note that the path to thunderbird's mailbox files varies with each OS, and exception instructions are specific to your virus scanner.

My theory is this: It looks like Thunderbird 3.0.0 and above generates a huge number of file open, seek or read events causing the virus scanner to scan the mailbox files over and over again. This only seems to affect scanners that ignore file extensions and scan all files. This could be proved if someone has some IO monitoring tools and can observe how TB interacts with the mailbox files.

AVAST

Anecdotal evidence only, no definitive testing has been done. Love if it if somebody could find the time to do some thorough AVAST and TB testing!

Avast Blocks Sending and Receiving

My problem was Avast antivirus, once I stopped the service and restarted(virus program ect) thunderbird was once again working perfectly. Its a ssl cache problem within AVAST, not thunderbird. Learned from trying to eliminate avast from list of what may be interfering with thunderbird 3.1.2

AVAST blocks images in HTML email

"So I guess my problem's solved. I just wish I knew what happened. All I did was shut down the mail protection for a day, then restarted it. I didn't change a single setting in Mozilla Mail (didn't even open the options tab). Very strange, but I'm happy now!"
"Yeah, OK, so I uninstalled Avast, restarted the computer, launched TB and voila. Images are now loading when I click "Show Remote Content". "

Bullguard

From MozillaZine Forum BullGuard Thread October 7, 2010:

  • Problem: "expanding or collapsing items (subfolders, accounts) in the Folders display often locks up TB completely and the progam goes into Not responding state. OS is Windows Vista Home Premium SP2"
  • Solution: Upgrade to Version 9: "Bullguard asked me to upgrade from Version 8 to the beta version of Verion 9 of their product. This does seem to have resolved the issue. I am now running with their Spamfilter 9.0 enabled and (fingers crossed) everything seems OK."

The Global Search & Indexer

In regards to performance issues with antivirus software ... The global search & indexer normally only has impact during the initial indexing process. Performance of this feature should be acceptable after initial indexing is complete. The time needed for initial indexing normally varies from a few hours to a day, depending on the total size of all your messages.

The initial indexing process, performed upon upgrading from a prior version of Thunderbird, may be sped up by disabling on demand antivirus scanning of the Thunderbird mailbox files.

Bogus Windows System Proxies Left by Malware (noticed after MalWareBytes scan)

Malware (usually found only on Windows systems but could be on any system e.g. Mac or Linux; it's just much rarer for Mac and Windows systems) can install a bogus Internet access proxy.This proxy can slow down Thunderbird and other programs that access the Internet with the symptoms being "couldn't connect to proxy" errors, slow sending and receiving of email and images not being displayed in HTML emails.

Problem:Windows System Proxy blocking HTML images anecdote from GS

  • don't think this is a MalwareBytes problem but you never know!
"FInally! Got the answer from support at AVIRA, which wouldn't update for me. (also, THunderbird wouldn't "connect to proxy"). I went to Internet Explorer -- tools-- internet options-- connections-- LAN settings. There, I unchecked "Use proxy server;..." Voila! it all works. Avira updates, Thunderbird shows images, Java updates. It all works again. Apparently, when you do a full system scan with MalWareBytes, it puts that on for you to keep the computer from dialing out, but it doesn't uncheck it for you afterwards. How many of you use MalWareBytes? It's a good program, but check the LAN settings after scanning."

Solution: Disable Windows System Proxies

Internet Explorer | tools | internet options | connections | LAN settings and then uncheck "Use proxy server"

Solution for Spamfighter

After every upgrade you have to do the following. There seem to be two solutions from http://community.spamfighter.com/forums/p/237/888.aspx:

  1. In Start Menu | Repair Spamfighter; when repair is finished restart computer and then Spamfighter Toolbar will be back!! OR
  2. more drastic solution:
    1. Close Thunderbird.
    2. Go to Start -> All Programs -> Fighters -> SPAMfighter -> Modify SPAMfighter.
    3. Click Next twice.
    4. Click on the box next to Toolbar for Mozilla Thunderbird and select Entire feature will be installed on local hard drive.
    5. Click Install and let the installation run.
    6. When you next open Thunderbird SPAMfighter will be back again

Helpful Links