804847 - Funmoods.com add-on bypasses about:newaddon and requires an opt-in to revert homepage and search engine changes on uninstall

Status: RESOLVED WONTFIX

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Kris Maglione [:kmag]]

I was looking into the Wizebar software that's been causing trouble recently, and I came across this, which is developed by the same company (which also seems to develop the Babylon toolbar). It bypasses about:newaddon and requires opting in in the install dialog if you want to revert your original homepage and default search, and opting out of them being changed in the first place.

I'm not sure if opting in to reverting them on uninstall works. They certainly aren't reverted otherwise, though.

Installation dialog: https://people.mozilla.com/~kmaglione/images/47c5f4fbe06bf6c7.png

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

What is the homepage changed to?

Comment 2

[Kris Maglione [:kmag]]

Don't say I didn't warn you if it gives you a seizure-inducing animated gif:

http://searchfunmoods.com/?f=1&a=wbst&chnl=&cd=2XzuyEtN2Y1L1QzutDzztDtDtByB0AyE0ByE0EzytDyBtB0DtN0D0Tzu0CtBzyyBtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1584796963

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

The ID is [e-mail]

Comment 4

[Jorge Villalobos [:jorgev] (he/him)]

We never received the required information from the Funmoods people.

Kris, what are the current usage stats for funmoods?

Comment 5

[Kris Maglione [:kmag]]

~3.8M users

Comment 6

[Jorge Villalobos [:jorgev] (he/him)]

I just pinged the Funmoods people. We will block this next week if we don't receive anything from them.

Comment 7

[Jorge Villalobos [:jorgev] (he/him)]

Funmoods got back to us and we'll look at their installer.

Comment 8

[Kris Maglione [:kmag]]

Also silently installed by 1ClickDownloader. Related to New Tab add-on (bug 845611)

Comment 9

[Tyler Downer [He/Him]]

Any updates from funmoods?

Comment 10

[Kris Maglione [:kmag]]

I just checked the funmoods installer from funmoods.com for another reason. It now seems not to be bypassing about:newaddon, but does still make search and homepage settings before it gets the install opt-in.

Comment 11

[Jorge Villalobos [:jorgev] (he/him)]

The developers have been contacted again.

Comment 12

[Jorge Villalobos [:jorgev] (he/him)]

We received a response from Funmoods, saying that they're working on it and need 2 more weeks.

Comment 13

[Jorge Villalobos [:jorgev] (he/him)]

This has been fixed by the developers. The changes are now performed by the extension and it can be tested at http://funmoods.com. Please reopen if the problem happens again.