Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Kasperski says Firefox update (download) has Trojan.Win32.Generic

  • 2 replies
  • 2 have this problem
  • 5 views
  • Last reply by James

Dornbush
Dornbush
more options

Is the Firefox update legitimate? Doesn't Firefox automatically update?

Is the Firefox update legitimate? Doesn't Firefox automatically update?

Chosen solution

What is the name of the file that Kaspersky is analyzing? There is a FAKE update (which actually is malware) named something like "firefox_patch.exe". If that's what Kaspersky is protecting you from, please do not try to download or run it again.

Read this answer in context 👍 1

All Replies (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Chosen Solution

What is the name of the file that Kaspersky is analyzing? There is a FAKE update (which actually is malware) named something like "firefox_patch.exe". If that's what Kaspersky is protecting you from, please do not try to download or run it again.

James
James
  • Top 25 Contributor
  • Moderator
more options

No the .exe's with file names of say firefox-patch.exe is not legit.

The desktop Firefox is not just for Windows as it is for Mac OSX and Linux also so .exe would not be an effective way to send out Firefox updates. The updates are done internally in Firefox (with a .mar type of file) or by download from mozilla.org like say www.mozilla.org/firefox/all/

Even if Mozilla were to use .exe for Firefox updates on Windows, they would be serving them from a *.mozilla.org url and not from random websites with weird names.

Modified by James