641165 - Trojan in update downloaded

Status: VERIFIED INVALID

(Firefox :: Security, defect)

Description

[Teresa]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15

Trojan.Downloader, File, C:\Documents and Settings\John\My Documents\Downloads\firefox-update.exe, 11-27577

Reproducible: Always

Comment 1

[Ludovic Hirlimann [:Usul]]

Where did you download that file from ?

Comment 2

[Daniel Veditz [:dveditz]]

We do not make a file called "firefox-update.exe", you have fallen for a fake update scam. If you know where you got this file we can try to have the site added to the malware site blocking list.

Our updates are distributed as .MAR files and applied by an updater executable that was installed as part of Firefox itself. You should never have to "Save" a file and then run it to do an update, updates are automatically downloaded and applied the next time you restart. Sometimes if you haven't restarted in a while and an update is ready we'll prompt you to restart but that's about the most interaction you should have.

https://support.mozilla.com/en-US/questions/751789