X
Tap here to go to the mobile version of the site.

Support Forum

antivirus labeled as malware WSReputation from firefox setup stub 46.0.1.exe. Where is it from and what should I do to get rid of it?

Posted

Symantec antivirus quarantined WS.Reputation.1 as malware, and indicated the file name as firefox setup stub 46.0.1.exe. It was found in downloads, so something downloaded from firefox. I want to know what it is because I may have transferred it to another computer that doesn't have Symantec via a memory key. My other laptop uses Windows Defender antivirus so I want to know if there is a risk. So if I have to get rid of it, please tell me in very simple language the step by step removal procedure Thanks for your help

Symantec antivirus quarantined WS.Reputation.1 as malware, and indicated the file name as firefox setup stub 46.0.1.exe. It was found in downloads, so something downloaded from firefox. I want to know what it is because I may have transferred it to another computer that doesn't have Symantec via a memory key. My other laptop uses Windows Defender antivirus so I want to know if there is a risk. So if I have to get rid of it, please tell me in very simple language the step by step removal procedure Thanks for your help

Additional System Details

Installed Plug-ins

  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers
  • Shockwave Flash 23.0 r0
  • 5.1.50907.0

Application

  • Firefox 50.0
  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0
  • Support URL: https://support.mozilla.org/1/firefox/50.0/WINNT/fr/

Extensions

  • Adblock Plus 2.7.2 ({d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d})
  • Application Update Service Helper 1.0 (aushelper@mozilla.org)
  • Multi-process staged rollout 1.5 (e10srollout@mozilla.org)
  • Pocket 1.0.5 (firefox@getpocket.com)
  • Video DownloadHelper 5.4.2 ({b9db16a4-6edc-47ec-a1f4-b86292ed211d})
  • Web Compat 1.0 (webcompat@mozilla.org)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) HD Graphics
  • adapterDescription2:
  • adapterDeviceID: 0x0046
  • adapterDeviceID2:
  • adapterDrivers: igdumd64 igd10umd64 igdumdx32 igd10umd32
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterSubsysID: 00071179
  • adapterSubsysID2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • crashGuards: []
  • currentAudioBackend: wasapi
  • direct2DEnabled: False
  • direct2DEnabledMessage: [u'tryNewerDriver', u'8.1500.1000.2202']
  • directWriteEnabled: False
  • directWriteVersion: 6.2.9200.22164
  • driverDate: 7-28-2010
  • driverDate2:
  • driverVersion: 8.15.10.2189
  • driverVersion2:
  • featureLog: {u'fallbacks': [], u'features': [{u'status': u'available', u'description': u'Compositing', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'HW_COMPOSITING'}, {u'status': u'available', u'description': u'Direct3D11 Compositing', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'D3D11_COMPOSITING'}, {u'status': u'disabled', u'description': u'Direct3D9 Compositing', u'log': [{u'status': u'disabled', u'message': u'Disabled by default', u'type': u'default'}], u'name': u'D3D9_COMPOSITING'}, {u'status': u'blacklisted', u'description': u'Direct2D', u'log': [{u'status': u'available', u'type': u'default'}, {u'status': u'blacklisted', u'message': u'#BLOCKLIST_FEATURE_FAILURE_DL_BLACKLIST_g984', u'type': u'env'}], u'name': u'DIRECT2D'}, {u'status': u'available', u'description': u'Direct3D11 hardware ANGLE', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'D3D11_HW_ANGLE'}]}
  • info: {u'AzureCanvasAccelerated': 0, u'AzureCanvasBackend': u'skia', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'cairo'}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • supportsHardwareH264: No; D3D9 blacklisted with DLL igdumd64.dll (8.15.10.2189)
  • webgl2Renderer: (no info)
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) HD Graphics Direct3D11 vs_4_0 ps_4_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

Misc

  • User JS: No
  • Accessibility: No
Josh Ross 12 solutions 143 answers

Steps for malware removal. If you are a simple PC user, feel free to skip step 3. This should deal with the infection.

1. Install and run RKill to kill malicious processes and services 2. Check your Programs and features and see if there are any new recently installed programs that you don’t recognize. If there are, remove them. 3. Check your task manager for any suspicious processes, if found, identify folders and try to remove them manually. Or just "Win key + R" and type %appdata%. Afterward, delete potentially malicious folders. 4. Do a full scan with anti-virus software of your choice or use Windows Defender to clean up initial infections. 5. Scan your PC with Hitman Pro, Malwarebytes, and AdwCleaner. Multiple anti-malware solutions will confirm that the threat was removed.

Steps for malware removal. If you are a simple PC user, feel free to skip step 3. This should deal with the infection. 1. Install and run RKill to kill malicious processes and services 2. Check your Programs and features and see if there are any new recently installed programs that you don’t recognize. If there are, remove them. 3. Check your task manager for any suspicious processes, if found, identify folders and try to remove them manually. Or just "Win key + R" and type %appdata%. Afterward, delete potentially malicious folders. 4. Do a full scan with anti-virus software of your choice or use Windows Defender to clean up initial infections. 5. Scan your PC with Hitman Pro, Malwarebytes, and AdwCleaner. Multiple anti-malware solutions will confirm that the threat was removed.

Question owner

Thnx for your reply. Can u tell me where to get RKill? Where do I find Hitman Pro, Malwarebytes and Adw Cleaner? Are these add ons by Mozilla?

Thnx for your reply. Can u tell me where to get RKill? Where do I find Hitman Pro, Malwarebytes and Adw Cleaner? Are these add ons by Mozilla?
Josh Ross 12 solutions 143 answers

These are not add-ons, but standalone applications.

RKill

Malwarebytes

Adwcleaner

Hitman Pro

Try running the applications and see if that yields results. If that is an issue, you can read more in-depth about the matter below.

Malware and general removal tips.

These are not add-ons, but standalone applications. [https://www.bleepingcomputer.com/download/rkill/ RKill] [https://www.malwarebytes.com Malwarebytes] [https://www.malwarebytes.com/adwcleaner Adwcleaner] [https://www.hitmanpro.com Hitman Pro] Try running the applications and see if that yields results. If that is an issue, you can read more in-depth about the matter below. [http://www.2-spyware.com/malware-removal Malware and general removal tips].
FredMcD
  • Top 10 Contributor
4306 solutions 60441 answers

Some protection programs don't like the update/install stubs. Go here for the full installer.

http://www.mozilla.org/en-US/firefox/all/ Download Firefox For All Languages And Systems

Some protection programs don't like the update/install stubs. Go here for the full installer. http://www.mozilla.org/en-US/firefox/all/ Download Firefox For All Languages And Systems