Blocklist malicious add-ons




3 years ago
2 years ago


(Reporter: Toady, Unassigned)


Firefox Tracking Flags

(Not tracked)




3 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0
Build ID: 20141126041045

Steps to reproduce:

Request blocklisting on following addons

Actual results:

Reports with these addons installed can be found here

A friends Firefox would constantly crash and when looking at his installed addons found a GUID when looking on crash-stats it appears their.

Unfortunately his hdd was nuked (Formatted) so unable to provide a sample. 

Expected results:

Not sure if his crashes were associated with the addon but he has not had a single crash since the re installation of windows.

I am reporting this issue on his behalf.

Comment 1

3 years ago
CC'ed Jorge.
Component: Untriaged → Blocklisting
Flags: needinfo?(jorge)
Product: Firefox →
Summary: malicious addons → Blocklist malicious add-ons
Version: 34 Branch → unspecified
Can you explain why you think these add-ons are malicious?
Flags: needinfo?(jorge) → needinfo?(toadyshadow101)

Comment 3

3 years ago
Hi Jorge

When helping me friend narrow down what was causing his crashes i asked him in Skype to provide a the text readout from about:support and the addon GUID was there and when checking out the list and checking the crash-stats i found other users with that addon, When looking further into it i found many addons with "ffxtbr@" in front of there name and similar naming convention on the end of the GUID and with almost the same version number, Also when Googling the GUIDS all in one form or another were flagged as PUPs.


While he formatted his computer because of other viruses i thought i would report this just in case.
For me this sent red flags.

Please forgive me if these are legit addons.
Flags: needinfo?(toadyshadow101)

Comment 4

3 years ago
Any update on this
Flags: needinfo?(jorge)
Kris, can you look into the stats for those IDs?
Flags: needinfo?(jorge) → needinfo?(kmaglione+bmo)
As far as I've been able to determine in the past, these add-ons are all Ask toolbar add-ons installed manually via the websites in their IDs.

Their current stats, from a 5% sample (enabled, disabled, foreign installs):	26929, 14133, 11848	21917, 6777, 5511	15379, 4521, 3636	14452, 1423, 587	12703, 3136, 2000	7527, 2147, 1699	1642, 808, 578	6, 32, 17	6, 12, 5	5, 23, 13	5, 13, 3	2, 8, 7	2, 1813, 91	1, 2, 0	0, 14, 0
Flags: needinfo?(kmaglione+bmo)
Okay, so I don't think there's anything to do here. If there's a strong correlation between any of these add-ons and crashes in Firefox, please file independent bugs for them.
Last Resolved: 3 years ago
Resolution: --- → INVALID


2 years ago
Product: → Toolkit
You need to log in before you can comment on or make changes to this bug.