X
Tap here to go to the mobile version of the site.

منتدى الدعم

Why did an upgrade of firefox ask to install the malware Bettersurf Extension

Posted

On my last upgrade in Firefox (version 25.0), the next time I opened Firefox, I was asked to install the extension Buttersurf.. I have done some reading about this and it is a maleware. Why are you allowing this extension??? I deleted all signs of it from my computer.

On my last upgrade in Firefox (version 25.0), the next time I opened Firefox, I was asked to install the extension Buttersurf.. I have done some reading about this and it is a maleware. Why are you allowing this extension??? I deleted all signs of it from my computer.

Additional System Details

Installed Plug-ins

  • Google Update
  • Shockwave Flash 11.9 r900
  • RealPlayer(tm) LiveConnect-Enabled Plug-In
  • RealPlayer Download Plugin
  • 5.1.20913.0
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In
  • RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In
  • RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In
  • RealDownloader Plugin
  • A plugin to detect whether the Adobe Creative Cloud is installed on this machine.v_2_0_0_0
  • GEPlugin
  • Next Generation Java Plug-in 10.25.2 for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Garmin Communicator Plug-In 4.0.4.0
  • Adobe PDF Plug-In For Firefox and Netscape 11.0.0
  • iTunes Detector Plug-in
  • Musicnotes Viewer plugin 1.19.0 For more information visit www.musicnotes.com
  • DivX VOD Helper Plug-in
  • Plugin for Wacom tablets.
  • Wacom Dynamic Link Library
  • DivX Web Player version 2.0.3.4
  • Office Live Update v1.5
  • ScorchPlugin
  • Provides additional functionality on Facebook. See our web site for details.

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0

More Information

philipp
  • Top 25 Contributor
  • Moderator
5287 solutions 23361 answers

@hiding-behind-the-sofa: apparently they've renamed to Better Surf Plus 1.1, so that is not covered by the current blocklist, but i've forwarded this new information to the right team at mozilla already.

please note that if this kind of stuff is re-appearing on its own, you likely have a malware problem on your computer. please run scans with the various security tools, i've mentioned at the top of this thread!

@hiding-behind-the-sofa: apparently they've renamed to Better Surf Plus 1.1, so that is not covered by the current blocklist, but i've forwarded this new information to the right team at mozilla already. please note that if this kind of stuff is re-appearing on its own, you likely have a malware problem on your computer. please run scans with the various security tools, i've mentioned [https://support.mozilla.org/en-US/questions/977507#answer-501443 at the top] of this thread!

Modified by philipp

If it was the most recent version of BetterSurf (the Plus 1.1) rather than the earlier 1.1 version, then that would explain why it managed to avoid detection yet again, rather than anything unpleasant lurking on my computer. By the sound of it, this BetterSurf thing appears to be evolving at an alarming rate.

I have done another full scan and run PowerErasor with Norton, but nothing has been detected. It did detect and quarantine two BetterSurf files (Trojan.Adclicker and Trojan.ADH.2) last week. Do you reckon it is worth me switching to Kaspersky? I hear that a lot of people rate it highly.

If it was the most recent version of BetterSurf (the Plus 1.1) rather than the earlier 1.1 version, then that would explain why it managed to avoid detection yet again, rather than anything unpleasant lurking on my computer. By the sound of it, this BetterSurf thing appears to be evolving at an alarming rate. I have done another full scan and run PowerErasor with Norton, but nothing has been detected. It did detect and quarantine two BetterSurf files (Trojan.Adclicker and Trojan.ADH.2) last week. Do you reckon it is worth me switching to Kaspersky? I hear that a lot of people rate it highly.
philipp
  • Top 25 Contributor
  • Moderator
5287 solutions 23361 answers

i would still worry how this new version of bettersurf came onto your computer.

please scan with malwarebytes & adwcleaner - they are both free tools and focused on adware and browser-hijackers, which is an area that might not be covered by traditional AV-software...

i would still worry how this new version of bettersurf came onto your computer. please scan with malwarebytes & adwcleaner - they are both free tools and focused on adware and browser-hijackers, which is an area that might not be covered by traditional AV-software...

Just downloaded and run AdwCleaner - couldn't find anything directly relating to BetterSurf (e.g any .js files)...but by George there was a load of junk that I didn't know was in my computer! That is not to say something was lurking there, or even if it has got rid of it altogether. I guess time will tell.

 I would've downloaded something like this sooner, but I was told that running another programme in addition to Norton would make it crash. 

Many thanks

Just downloaded and run AdwCleaner - couldn't find anything directly relating to BetterSurf (e.g any .js files)...but by George there was a load of junk that I didn't know was in my computer! That is not to say something was lurking there, or even if it has got rid of it altogether. I guess time will tell. I would've downloaded something like this sooner, but I was told that running another programme in addition to Norton would make it crash. Many thanks

Thought I would give Malwarebytes a try this evening...just run a scan and it has detected yet another version of BetterSurf called BetterSurf Plus. Is it me or are they being updated like billy-o? I also get the impression that my IP address is being targeted.

Thought I would give Malwarebytes a try this evening...just run a scan and it has detected yet '''''another''''' version of BetterSurf called BetterSurf Plus. Is it me or are they being updated like billy-o? I also get the impression that my IP address is being targeted.
James
  • Moderator
1594 solutions 11230 answers

Better-Surf 1.1 and Better Surf Plus 1.1 are on the blocklist. https://addons.mozilla.org/en-US/firefox/blocked/

Better-Surf 1.1 and Better Surf Plus 1.1 are on the blocklist. https://addons.mozilla.org/en-US/firefox/blocked/
jscher2000
  • Top 10 Contributor
8634 solutions 70613 answers

Hi hiding-behind-the-sofa, you may want to download some of the other tools and then run them all in Windows Safe Mode. This sometimes is more effective than scanning in a normal session of Windows.

Hi hiding-behind-the-sofa, you may want to download some of the other tools and then run them all in Windows Safe Mode. This sometimes is more effective than scanning in a normal session of Windows.