862272 - Silently installed malicious extension: "BrowserProtect" {0F827075-B026-42F3-885D-98981EE7B1AE}

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Thomas Bertels]

When downloading software from the site 01net, we get a installer downloader which installs by default three Firefox extensions:
- BrowserProtect ({0F827075-B026-42F3-885D-98981EE7B1AE})
- DealPly Shopping ([e-mail])
- Delta Toolbar ([e-mail])

Firefox asks us correctly to check a box to enable the latter two.
However, the first one, "BrowserProtect" (not to be confused with the real one on AMO) is enabled automatically.
It also changes the homepage, the default search engine and the default page when opening a new tab.

I suggest hard-blocking it as it's malicious in nature.

You can download a copy of that installer downloader which includes "BrowserProtect" here:
http://www.01net.com/telecharger/windows/Internet/partage/fiches/34132.html

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

Blocked: https://addons.mozilla.org/en-US/firefox/blocked/i334

See also bug 842206 for a similar, previous block.