959279 - Blocklist malicious Microsoft DirectInput Object extension

Status: VERIFIED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Jorge Villalobos [:jorgev] (he/him)]

Attachment: MS-ext.rar

Our friends at Stop Malvertising just notified us about this add-on which seems to be installed by a trojan:
http://stopmalvertising.com/malware-reports/analysis-of-trojan-win32-miuref-a/firefox.html

See attached file. Password is 'infected'.

ID: {25D77636-38B1-1260-887C-2D4AFA92D6A4}

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

Blocked: https://addons.mozilla.org/en-US/firefox/blocked/i536

Comment 2

[Iulian Timis]

Verified as fixed in https://addons.mozilla.org/en-US/firefox/blocked/i536 on FF26 (Win 7).
Closing bug.