Firefox.exe

Topic

New Reply

I got hit with this a couple of months ago, http://kb.mozillazine.org/Firefox.exe_always_open%5B/url%5D very nasty couldn’t clear it and eventually did a clean install of XP. Using windows firewall at the time – lets it through outward to phone home or whatever….changed to Zone alarm – warned me (after uninstalling firefox browser) but as it uses the firefox name maybe it would have let it through also. I discovered it was running by looking in task manager processes after having suspicions that the computer was showing too much activity when it should have been idle. I suppose you can never rest easy nowadays.

Reply | Quote

Replies

Thanks for posting the heads up. This is not a new trojan (I found references to it back as far as ’99) and appears to be a variant of the Poison Ivy Trojan.

For future reference, the best solution to things like this is to get a copy of HijackThis. I posted a link to the program and a tutorial for it’s use a while back here. If your system is infected you should disconnect it from the internet and use a different computer to DL HijackThis and any of the tools they tell you you will need once they read the log you post to their site.

Reply | Quote

Sounds evil!

Lucky I use Avira AntiVir, the fist freebie to cover this nasty, second only to the commercial NOD32.

Reply | Quote