BTW have you heard of virus or spyware that targets Linux Thunderbird?

Paul,
Only from you, though your the only user of Thunderbird that I know.
Does it infect Windows/Thunderbird too?
Blake

I don't know. It appears to install itself at the head of the inbox.
Is there something unique about the first message in the inbox?

Here is what it looks like

--------------------------------------------------------------
From - Wed Jul 30 17:44:51 2008
X-Account-Key: account2
X-UIDL: 1koiqO4aw3Nl34j1
X-Mozilla-Status: 0009
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Status: RO
Return-Path: <xxxxx@lhvpower.com>
Received: from noehlo.host ([127.0.0.1])
       by mx-austrian.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1koiqO4aw3Nl34j0; Wed, 30 Jul 2008 16:37:58 -0400 (EDT)
Received: from webmail3.abac.com ([216.55.191.213])
       by mx-austrian.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1koiqN5Nj3Nl34j2
       for <rotaryeng@earthlink.net>; Wed, 30 Jul 2008 16:37:57 -0400 (EDT)
Received: from webmail3.abac.com (localhost.abac.com [127.0.0.1])
       by webmail3.abac.com (8.14.2/8.14.2) with ESMTP id m6UKbrOd046196
       for <rotaryeng@earthlink.net>; Wed, 30 Jul 2008 13:37:53 -0700 (PDT)
       (envelope-from xxxx@lhvpower.com)
Received: (from webmail@localhost)
       by webmail3.abac.com (8.14.2/8.14.2/Submit) id m6UKbrpG046195;
       Wed, 30 Jul 2008 13:37:53 -0700 (PDT)
       (envelope-from xxxx@lhvpower.com)
X-Authentication-Warning: webmail3.abac.com: webmail set sender to xxxxx@lhvpower.com using -f
To: Rotary Engine <rotaryeng@earthlink.net>
Subject: Fwd: New email address
MIME-Version: 1.0
Date: Wed, 30 Jul 2008 13:37:53 -0700
From: <xxxx@lhvpower.com>
Message-ID: <fe83daee9687943d69c2b97e3cde111d@mail.lhvpower.com>
X-Sender: xxxxx@lhvpower.com
User-Agent: RoundCube Webmail/0.1-rc1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Spam-Score: 0.648 (NO_REAL_NAME,SPF_HELO_PASS,SPF_PASS)
X-ELNK-Received-Info: spv=0;
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=0b; sbw=000;