1163217 - Malicious addon "SafeMoney" needs blocklisting

Status: RESOLVED INVALID

(Toolkit :: Blocklist Policy Requests, defect)

Description

[vgeisler]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
Build ID: 20150122214805

Steps to reproduce:

installed Kaspersky Internet security 2015


Actual results:

Kaspersky upon installation attempted to install plugin "smartmoney" in firefox. a warning popped up asking me if i wanted to allow Kaspersky to do this. I declined. 

At some point unknown kaspersky forced the installation even though i had specifically not authorized it. I disabled the plugin and upon next reboot the plugin was re enabled. 

While some users may find this plugin useful it causes severe disruption to some banking sites, and slows the browser down significantly.  One a user declines a plugin any attempt by that plugin to bypass the users wishes should be considered hostile to good security practices. 




Expected results:

Once plugin is declined that should be it. A plugin should NEVER force install and Never re enable once its been disabled.

Comment 1

[Johannes Pfrang [:johnp]]

Fwiw, the component can be disabled in the Kaspersky Internet Security settings:
> https://support.kaspersky.com/11161#block2

Comment 2

[vgeisler]

thanks yes ive found that as well.

That's not really the point though. If a user declines or disables the plugin that should be it, full stop. Kaspersky has NO business hijacking the browser.

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

Please bring this up to Kaspersky support. This is likely a bug on their side and not intentional. The add-on isn't malicious, so we can't block it at this point.