524259 - need support article and maybe blocking for "Fast Browser Search"

Status: RESOLVED FIXED

(Firefox :: Extension Compatibility, defect)

Description

[chris hofmann]

crash reports indicate an addon installed in some firefox systems that maybe causing problems for some set of users.

Crash signature is [@ js_FinishSharingTitle] and part of bug [Bug 466850]

>      57% (1276/2231) vs.   6% (2840/47439)
> {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB} (Fast Browser Search,
> https://addons.mozilla.org/addon/10775
 
)


http://www.malwarebytes.org/forums/index.php?s=bba53feee34eaebef6427ff10601114e&showtopic=23110&st=60&p=133647&#entry133647 show the addon itself injecting into default search

FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search"
FF - prefs.js..browser.search.defaulturl: "http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=4&q="
FF - prefs.js..browser.search.order.1: "Fast Browser Search"
FF - prefs.js..browser.search.selectedEngine: "Fast Browser Search"

and enabling the addon with

FF - prefs.js..extensions.enabledItems: {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.2.5

looks like it might get installed as part of "My Tattoos" or other affiliates that then starts redirected users to http://www.fastbrowsersearch.com/

then you might get additional malware to help you remove fastbrowsersearch if you end up at this site
http://www.spywareremove.com/removeFastBrowserSearch.html

http://www.google.ro/support/forum/p/Web+Search/thread?tid=060912bb33995048&hl=en

shows a lot of people having problems trying to get it off their system.

we try to figure out reliable removal steps and if we can do a support article.

once we understand all the things needed to remove we could spin off a blocking bug if we can reliable block this thing.

Comment 1

[chris hofmann]

found a few posts on SUMO indicating some user frustration fast browser search

http://support.mozilla.com/tiki-newsearch.php?where=f&locale=en-US&q=Fast+Browser+Search&sa=

Comment 2

[Andy McKay]

Legacy extensions are no longer valid in Firefox 57, closing.