X
Tap here to go to the mobile version of the site.

Support Forum

Firefox version 33.0.0.5397 appears in windows/erdnt/cache how do I remove it

Posted

The first scan I ran with Secunia PSI 2 flagged up an old version of Firefox 33.0.0.5397 as out of date and no longer supported and recommended updating or uninstalling. I was unaware I had any old versions of Firefox installed as I am using the latest version 36.0.4 which actually appears further down the list of programmes on the PSI scan. This old version's location is also a bit strange, it appears in a cache within a folder called erdnt in windows. The file path is .... windows\erdnt\cache\firefox.exe. I have looked online for info about this erdnt folder and it seems to be part of a backup programme called ERUNT which I do not seem to have. Very strange. The current version of Firefox 36.0.4 is located in the program files where I would expect to find it.

   Can anyone shed some light on this and explain why there appears to be an old version of Firefox in this odd location and if it is OK to remove it and how I go about doing so. Do I just delete or do I need to uninstall it ? What affect any action might have on the current version of Firefox that I am using ?
The first scan I ran with Secunia PSI 2 flagged up an old version of Firefox 33.0.0.5397 as out of date and no longer supported and recommended updating or uninstalling. I was unaware I had any old versions of Firefox installed as I am using the latest version 36.0.4 which actually appears further down the list of programmes on the PSI scan. This old version's location is also a bit strange, it appears in a cache within a folder called erdnt in windows. The file path is .... windows\erdnt\cache\firefox.exe. I have looked online for info about this erdnt folder and it seems to be part of a backup programme called ERUNT which I do not seem to have. Very strange. The current version of Firefox 36.0.4 is located in the program files where I would expect to find it. Can anyone shed some light on this and explain why there appears to be an old version of Firefox in this odd location and if it is OK to remove it and how I go about doing so. Do I just delete or do I need to uninstall it ? What affect any action might have on the current version of Firefox that I am using ?

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 11.0.10
  • Google Update
  • Next Generation Java Plug-in 11.40.2 for Mozilla browsers
  • McAfee MSC FF plugin DLL
  • McAfee Virtual Technician plugin
  • Motive Plugin for Mozilla Browsers
  • LastPass Plugin
  • Shockwave Flash 17.0 r0
  • 5.1.30514.0
  • VLC media player Web Plugin

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.0; rv:36.0) Gecko/20100101 Firefox/36.0

More Information

FredMcD
  • Top 10 Contributor
4269 solutions 59875 answers

Helpful Reply

That is NOT a Firefox version I ever heard of, and the Firefox programs are stored in the computers Programs Folder.

Open the folder you posted, and rename that file to fffffffffff.exe. Use most or all of the listed scanners.

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one. Windows 8 has antivirus built-in already.

Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Did this fix your problems? Please report back to us!

That is NOT a Firefox version I ever heard of, and the Firefox programs are stored in the computers Programs Folder. Open the folder you posted, and rename that file to fffffffffff.exe. Use most or all of the listed scanners. Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of. You can try these free programs to scan for malware, which work with your existing antivirus software: * [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner] * [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware] * [http://support.kaspersky.com/viruses/disinfection/5350 Anti-Rootkit Utility - TDSSKiller] * [http://general-changelog-team.fr/en/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner AdwCleaner] (for more info, see this [http://www.bleepingcomputer.com/download/adwcleaner/ alternate AdwCleaner download page]) * [http://www.surfright.nl/en/hitmanpro/ Hitman Pro] * [http://www.eset.com/us/online-scanner/ ESET Online Scanner] [http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one. Windows 8 has antivirus [http://www.microsoft.com/security/pc-security/windows8.aspx#antivirus built-in] already. Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article. Did this fix your problems? Please report back to us!
guigs 1072 solutions 11697 answers

Helpful Reply

The tool is known to act as a back up to the Windows Registry.

Does Erunt use a number scheme for naming its registry backups for specific programs?

The tool is known to act as a back up to the Windows Registry. *[http://www.bleepingcomputer.com/download/erunt/ Bleeping Computer on ERUNT] Does Erunt use a number scheme for naming its registry backups for specific programs?
James
  • Top 25 Contributor
  • Moderator
1602 solutions 11336 answers

removed the fake and malware tags.

FredMcD said

That is NOT a Firefox version I ever heard of

It is the FileVersionNumber of the Firefox 33.0 .exe however.

removed the fake and malware tags. ''FredMcD [[#answer-711163|said]]'' <blockquote> That is NOT a Firefox version I ever heard of</blockquote> It is the FileVersionNumber of the Firefox 33.0 .exe however.

Question owner

Hi, Thanks for your replies just picked them up, a bit late in the day, and then screwed up my initial reply by attempting to quote part of Fred McD's post as above. Managed to lose the reply in the process.

I have fairly basic computer skills and am not fully versed with the Forum options or etiquette either !

So, try again, I am not sure why I need to rename the file I posted as ffffffffff.exe ( Are the number of f's important ? ) (Tried to 'quote' part of FredMcD's reply here ) . I have a McAfee security suite as well as Malwarebytes and Hitman Pro, they have not picked up any Malware. I am reluctant to use an antiRootkit programme unless really necessary as do not really have the skills to interpret any result other than clear, eg a false positive. My PC's behaviour has not given me any real concerns.

I have looked at the forums on Bleeping Computer for help and may post this question there as well. There was the odd reference but I did not really find an answer. I do not appear to have the ERUNT programme just the erdnt folder in windows with a cache folder containing the old Firefox version. I notice though that the file was created just after I switched to Firefox for the first time about six months ago.

Have just realised , having not used the forum very often, that the last two posts are 'moderator/administrator' replies and as such have removed the fake and malware tags. Wasn't clear what this meant at first.

I will look at the Bleeping Computer link and wait to see if I receive any further advice .

                                                 Thanks again to all.
Hi, Thanks for your replies just picked them up, a bit late in the day, and then screwed up my initial reply by attempting to quote part of Fred McD's post as above. Managed to lose the reply in the process. I have fairly basic computer skills and am not fully versed with the Forum options or etiquette either ! So, try again, I am not sure why I need to rename the file I posted as ffffffffff.exe ( Are the number of f's important ? ) (Tried to 'quote' part of FredMcD's reply here ) . I have a McAfee security suite as well as Malwarebytes and Hitman Pro, they have not picked up any Malware. I am reluctant to use an antiRootkit programme unless really necessary as do not really have the skills to interpret any result other than clear, eg a false positive. My PC's behaviour has not given me any real concerns. I have looked at the forums on Bleeping Computer for help and may post this question there as well. There was the odd reference but I did not really find an answer. I do not appear to have the ERUNT programme just the erdnt folder in windows with a cache folder containing the old Firefox version. I notice though that the file was created just after I switched to Firefox for the first time about six months ago. Have just realised , having not used the forum very often, that the last two posts are 'moderator/administrator' replies and as such have removed the fake and malware tags. Wasn't clear what this meant at first. I will look at the Bleeping Computer link and wait to see if I receive any further advice . Thanks again to all.

Modified by James

Tyler Downer
  • Top 25 Contributor
  • Moderator
1538 solutions 10735 answers

Secunia's scanner is honestly not a very good program. What you are seeing is the file version of Firefox 33, not the version itself. You may have multiple installs of Firefox on your machine, which is a different problem, but this isn't malware and it's not anything to be concerned about.

Follow the steps at Update Firefox to the latest release to make sure you are on the latest version of Firefox and you should be fine. Uninstall Secunia for a long-term solution ;)

Secunia's scanner is honestly not a very good program. What you are seeing is the file version of Firefox 33, not the version itself. You may have multiple installs of Firefox on your machine, which is a different problem, but this isn't malware and it's not anything to be concerned about. Follow the steps at [[Update Firefox to the latest version]] to make sure you are on the latest version of Firefox and you should be fine. Uninstall Secunia for a long-term solution ;)

Question owner

Hi Tyler,

Thanks for your reply. I have seen mixed reviews online about Secunia PSI both for 2 and 3 (the latest version, but not so well received). It took me a few attempts to actually get PSI 2 to scan, and I have had a problem trying to register on their support forum. Emailed them about this but no reply yet. So I am unable to post on their forum. Not a very good experience altogether really. I decided to install it initially because this Tech guy who writes for a UK broadsheet newspaper I follow kept on recommending it, I think I might be giving him some Feedback.

I do have the latest version of Firefox (36.0.04) installed and it is listed further down as such by Secunia PSI in the correct location in Programme files . I only have one outstanding 'vulnerability' listed and it is this Firefox 33 file in this odd folder 'erdnt'

I have found a similar post in the Secunia forum from 2011 and it was recommended that the file can be deleted safely as it is associated with a 'Registry utility called ERUNT' ( I can't find any such utility on my PC).

I have pasted this reference from the Secunia forum in sq brackets below :

I have Firefox 6 installed, but it's showing v. 5 as waiting for an update. C/WINDOWS/ERDNT/cache/firefox.exe 5.0.1.4.205

The ERDNT folder is associated with a Registry utility called ERUNT. You can safely delete this file' ]

As I have been unable to Post on the Secunia forum I have not been able to check this recommendation out and as my computer skills are fairly basic I did not want to delete anything I might regret without getting a second opinion or further info on this Firefox file and its location. Which is why I posted my question in the Firefox support forum.

PS. Not sure why I am getting these slide bars on my replies. May have clicked something by mistake !


edited by removing spaces before first character of each sentence to remove scroll bars.

Hi Tyler, Thanks for your reply. I have seen mixed reviews online about Secunia PSI both for 2 and 3 (the latest version, but not so well received). It took me a few attempts to actually get PSI 2 to scan, and I have had a problem trying to register on their support forum. Emailed them about this but no reply yet. So I am unable to post on their forum. Not a very good experience altogether really. I decided to install it initially because this Tech guy who writes for a UK broadsheet newspaper I follow kept on recommending it, I think I might be giving him some Feedback. I do have the latest version of Firefox (36.0.04) installed and it is listed further down as such by Secunia PSI in the correct location in Programme files . I only have one outstanding 'vulnerability' listed and it is this Firefox 33 file in this odd folder 'erdnt' I have found a similar post in the Secunia forum from 2011 and it was recommended that the file can be deleted safely as it is associated with a 'Registry utility called ERUNT' ( I can't find any such utility on my PC). I have pasted this reference from the Secunia forum in sq brackets below : I have Firefox 6 installed, but it's showing v. 5 as waiting for an update. C/WINDOWS/ERDNT/cache/firefox.exe 5.0.1.4.205 The ERDNT folder is associated with a Registry utility called ERUNT. You can safely delete this file' ] As I have been unable to Post on the Secunia forum I have not been able to check this recommendation out and as my computer skills are fairly basic I did not want to delete anything I might regret without getting a second opinion or further info on this Firefox file and its location. Which is why I posted my question in the Firefox support forum. PS. Not sure why I am getting these slide bars on my replies. May have clicked something by mistake ! ----- edited by removing spaces before first character of each sentence to remove scroll bars.

Modified by James

FredMcD
  • Top 10 Contributor
4269 solutions 59875 answers

Those are because the first character on that line is a space, and when the space is first, it becomes a format command.

Those are because the first character on that line is a space, and when the space is first, it becomes a format command.

Question owner

OK,thanks. Better keep things closed up and tight to left margin. Still not sure what format command I unintentionally triggered.

OK,thanks. Better keep things closed up and tight to left margin. Still not sure what format command I unintentionally triggered.
FredMcD
  • Top 10 Contributor
4269 solutions 59875 answers

It was the space as the first character;

No Space

With Space

No Space

It was the space as the first character; No Space With Space No Space
kenkon 18 solutions 81 answers

Could it be that ERUNT has been installed by one of your security software? Or by a technician?

Also, I would scan firefox.exe (the one in erdnt) with www.virustotal.com.

Could it be that ERUNT has been installed by one of your security software? Or by a technician? Also, I would scan firefox.exe (the one in erdnt) with www.virustotal.com.

Question owner

If erunt was installed there is no sign of it on my PC that I can find, only this erdnt folder.I have got some good antimalware installed and it has never picked up anything. I am going to run Microsoft's Safety scanner but I am not convinced malware is involved. Not come across virustotal before but will have a look at it. Thanks.

If erunt was installed there is no sign of it on my PC that I can find, only this erdnt folder.I have got some good antimalware installed and it has never picked up anything. I am going to run Microsoft's Safety scanner but I am not convinced malware is involved. Not come across virustotal before but will have a look at it. Thanks.