1215857 - Firefox installs third party plugins without prompt.

Status: RESOLVED INCOMPLETE

(Firefox :: Security, defect)

Description

[Moltres Rider]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
Build ID: 20151014143721

Steps to reproduce:

Open Firefox and noticed that malware installed a toolbar in Firefox.



Actual results:

Firefox did not ask me if I wanted this addon when I opened the browser. the toolbar was installed and no question was displayed upon launch asking if I wanted to install this toolbar. Skype Click-to-call that causes Firefox freezing was also installed without prompt


Expected results:

as any other recent Firefox versions, upon Firefox launch, it should ask if I want these third party plugins installed and provide the same way of saying "no". remove the checkbox

Comment 1

[:Gijs (he/him)]

Can you provide the add-ons in question? There should be XPI files or folders in your profile corresponding to them, and we'll need their IDs if we want to blocklist them (and their contents to work out if/how they bypassed the normal install processes).

Comment 2

[Moltres Rider]

I have no clue on how to do that. I removed it using a Malware sweeper and Skype Click-to-call was also uninstalled with uninstaller. 

May I add that there is no option to remove these third party addons in tools--addons which brings us back to the days of Firefox 3.x. all recent Firefox builds allowed removing of all addons from tools/addons, not Firefox 41

Comment 3

[Andre Klapper]

(In reply to Moltres Rider from comment #2)
> I have no clue on how to do that.

See https://support.mozilla.org/en-US/kb/profiles-where-firefox-stores-user-data

Comment 4

[Andre Klapper]

No info provided by reporter in two years, hence closing as incomplete.