Closed Bug 527571 Opened 16 years ago Closed 16 years ago

Trojan delivered with latest firefox update?

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: bramley9, Unassigned)

Details

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.2; .NET CLR 2.0.50727) Build Identifier: Mozilla Firefox/5.0 latest automatic update Scareware, apparently from pinall156.com Sudden appearance of screen declaring various infections on pc, contact this company now Reproducible: Always Steps to Reproduce: Start firefox and . . . System slowdown. Attempting to access web thru firefox calls up a screen saying pc infected, enter this code to move on. Did not, as don't knwo whether that was part of the parasite prog. However, altho system slow, could access web thru Explorer. Think trojan may have come with automatic update, latest release. Have uninstalled firefox and cleaned register.3. Actual Results: As above Expected Results: As above Browsed the web. Just asking you to check out your latest update for intruders.
The updates are coming over a secured connection and are virus tested and you are the only one who reported something like this. It's mnore likely that your system got infected on other ways or you have visited a scareware website. I will mark this bug incomplete because there is not enough information in this bug. IT' very unlikely that such software came over a Firefox update (virus tested, secure connection, no other reports). Or Do you mean you received an addon update and not a Firefox one ?
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → INCOMPLETE
??? Sorry, could not say. Just wanted F'fox to be aware it was a possibility, it may well have come from another site. Thanks for reply.
Resolution: INCOMPLETE → FIXED
Thanbk you for the report, there is of course still a chance that a virus scanner misses something but the build system are usually proteced and we should get many reports if something like this would happen marking wfm (fixed is only used if there is a source code patch in the bug)
Resolution: FIXED → WORKSFORME
15th Jan 2010 PC security blocked an attempt by Mozilla to install " VIRUS TROJAN". How come this was "delivered via Mozilla ??? having doubts on site security >
Virus Trojan is unspecific, what URL, which Trojan and what kind of Antivirus Software and how does it know Mozilla installs something or just downloads something (cache) ?
Firstly I should state I am not a computer wiz... The bottom right hand of the screen flashed up with Mozilla Firefox and Virus Trojan Access denied, it may be that it recognized Mozilla as "delivering" it. ? Looking up the report I came across the following that may help date 15/01/2010 time 16:05:43
Firstly I should state I am not a computer wiz... The bottom right hand of the screen flashed up with Mozilla Firefox and Virus Trojan Access denied, it may be that it recognized Mozilla as "delivering" it. ? Looking up the report I came across the following that may help date 15/01/2010 time 16:05:43 HEUR:Trojan.Scr http://fwlink.nx7.zedo.com.adlash.com/?al... Thank you
> The bottom right hand of the screen flashed up with Mozilla Firefox and Virus >Trojan Access denied, it may be that it recognized Mozilla as "delivering" it. That just means that the AV software detected that Firefox loaded something that looks like a trojan for the AV software.That a browser loads everything is not dangerous, only executing is. The AV software could for example detect a virus/trojan in the javascript of this bugzilla page. That could be a false positive or a real issue but it's only a bug in the browser is the browser executes remote code. Your example ( http://fwlink.nx7.zedo.com.adlash.com ) looks like a ad that is used in a page that you visited and the detection is heuristic. This is not a bug in Firefox or any other browser.
Thank you for the prompt replies, if it appears again I will try to relate to search or action the computer is taking.
You need to log in before you can comment on or make changes to this bug.