
Avast will occasionally throw out a warning when Firefox checks for updates
For about the last month or so, sometimes when I check for Firefox updates through Help > About Firefox, Avast will tell me that a threat was blocked. Specifically, what comes up in the warning is:
Object: http://ww38.au4.mozilla.org/?force-1 | {gzip}
Infection: HTML:Iframe-inf
Process: C:\Program Files\Mozilla Firefox\firefox.exe
I've already run a scan with Avast and Malwarebytes, but both came back with nothing. I'm currently running the 64-bit version of Firefox, and I don't know if this issue exists with the 32-bit version, as I don't use it all that often.
Also, I've had to manually update the browser for the last year or so because Firefox never seems to find any updates. I don't know if this is related to my problem.
Chosen solution
Firefox would normally connect to https://aus5.mozilla.org (secure connection) to check for updates as you can see by the value of the app.update.url pref on the about:config page.
You can check if you have an app.update.url.override pref that is set to http://ww38.au4.mozilla.org
- [/questions/1100751] How to enable automatic updates?
You can check if there is a user.js file in the profile folder.
You can use this button to go to the current Firefox profile folder:
- Help > Troubleshooting Information > Profile Directory:
Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder - http://kb.mozillazine.org/Profile_folder_-_Firefox
Do a malware check with several malware scanning programs on the Windows computer.
Please scan with all programs because each program detects different malware. All these programs have free versions.
Make sure that you update each program to get the latest version of their databases before doing a scan.
- Malwarebytes' Anti-Malware:
http://www.malwarebytes.org/mbam.php - AdwCleaner:
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml - SuperAntispyware:
http://www.superantispyware.com/ - Microsoft Safety Scanner:
http://www.microsoft.com/security/scanner/en-us/default.aspx - Windows Defender:
http://windows.microsoft.com/en-us/windows/using-defender - Spybot Search & Destroy:
http://www.safer-networking.org/en/index.html - Kasperky Free Security Scan:
http://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
- Anti-rootkit utility TDSSKiller:
http://support.kaspersky.com/5350?el=88446
See also:
- "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
All Replies (2)
Chosen Solution
Firefox would normally connect to https://aus5.mozilla.org (secure connection) to check for updates as you can see by the value of the app.update.url pref on the about:config page.
You can check if you have an app.update.url.override pref that is set to http://ww38.au4.mozilla.org
- [/questions/1100751] How to enable automatic updates?
You can check if there is a user.js file in the profile folder.
You can use this button to go to the current Firefox profile folder:
- Help > Troubleshooting Information > Profile Directory:
Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder - http://kb.mozillazine.org/Profile_folder_-_Firefox
Do a malware check with several malware scanning programs on the Windows computer.
Please scan with all programs because each program detects different malware. All these programs have free versions.
Make sure that you update each program to get the latest version of their databases before doing a scan.
- Malwarebytes' Anti-Malware:
http://www.malwarebytes.org/mbam.php - AdwCleaner:
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml - SuperAntispyware:
http://www.superantispyware.com/ - Microsoft Safety Scanner:
http://www.microsoft.com/security/scanner/en-us/default.aspx - Windows Defender:
http://windows.microsoft.com/en-us/windows/using-defender - Spybot Search & Destroy:
http://www.safer-networking.org/en/index.html - Kasperky Free Security Scan:
http://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
- Anti-rootkit utility TDSSKiller:
http://support.kaspersky.com/5350?el=88446
See also:
- "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
I checked to see if there was an override set, and there was. Put everything back to default settings, and it seems fine. I'll keep an eye on the override preference and keep running malware checks to make sure it keeps. Thanks for the help!