X
Tap here to go to the mobile version of the site.

Support Forum

fake folders AMozilla Afirefox

Posted

C:\Users\Freedome\AppData\Roaming

in that pat there is a folder called AMozilla  and inside a folder called Afirefox and is full of files

us this imgur link to see screenshots of the content of the folder https://imgur.com/a/V62kKeE


theres also a Mozilla folder in

C:\Users\Freedome\AppData\Roaming

which one is real ?  is it a malware of some sort ?
C:\Users\Freedome\AppData\Roaming in that pat there is a folder called AMozilla and inside a folder called Afirefox and is full of files us this imgur link to see screenshots of the content of the folder https://imgur.com/a/V62kKeE theres also a Mozilla folder in C:\Users\Freedome\AppData\Roaming which one is real ? is it a malware of some sort ?
Tyler Downer
  • Top 25 Contributor
  • Moderator
1528 solutions 10652 answers

The one Firefox is using is the Mozilla one. Did you (or someone else) create those folders back in April?

I doubt it's malware, that would be a weird thing for malware to do

The one Firefox is using is the Mozilla one. Did you (or someone else) create those folders back in April? I doubt it's malware, that would be a weird thing for malware to do
McCoy
  • Top 10 Contributor
519 solutions 4870 answers
Would you please take a look at : http://www.tomshardware.co.uk/answers/id-3783247/amozilla-afirefox-fake-folders.html And : http://www.tomsguide.com/answers/id-3783247/amozilla-afirefox-fake-folders.html Also : https://forums.malwarebytes.com/topic/225313-amozilla-afirefox/ Running (free) malware scans might be a good idea : https://www.malwarebytes.com/

Question owner

''McCoy [[#answer-1153208|said]]'' <blockquote> Would you please take a look at : http://www.tomshardware.co.uk/answers/id-3783247/amozilla-afirefox-fake-folders.html And : http://www.tomsguide.com/answers/id-3783247/amozilla-afirefox-fake-folders.html Also : https://forums.malwarebytes.com/topic/225313-amozilla-afirefox/ Running (free) malware scans might be a good idea : https://www.malwarebytes.com/ </blockquote> I made those threads last night man

Question owner

Tyler Downer said

The one Firefox is using is the Mozilla one. Did you (or someone else) create those folders back in April? I doubt it's malware, that would be a weird thing for malware to do

no I did not create those folders nor did someone else.

''Tyler Downer [[#answer-1153127|said]]'' <blockquote> The one Firefox is using is the Mozilla one. Did you (or someone else) create those folders back in April? I doubt it's malware, that would be a weird thing for malware to do </blockquote> no I did not create those folders nor did someone else.
FFus3r 50 solutions 757 answers

Helpful Reply

it is a malware that uses a fake firefox to access some websites in the background.

it came with some codecs you installed, i suggest you scan your system with malwarebytes in safe mode

it is a malware that uses a fake firefox to access some websites in the background. it came with some codecs you installed, i suggest you scan your system with '''malwarebytes''' in '''safe mode'''
candyvincent16 0 solutions 1 answers

Somebody else did he manages the address I just got evicted from and it wasn't trying to do something so he a so k me to look at it and I saw he had been in the jail

Somebody else did he manages the address I just got evicted from and it wasn't trying to do something so he a so k me to look at it and I saw he had been in the jail
McCoy
  • Top 10 Contributor
519 solutions 4870 answers

sinoda said

I made those threads last night man

You are "gamendub" and "jelloboy1"  ?

I also said in my post :

" Running (free) malware scans might be a good idea : "

https://www.malwarebytes.com/

Would you  ?

''sinoda [[#answer-1153217|said]]'' <blockquote> I made those threads last night man </blockquote> You are "gamendub" and "jelloboy1" ? I also said in my post : "'' Running (free) malware scans might be a good idea : ''" https://www.malwarebytes.com/ Would you ?

Modified by McCoy

McCoy
  • Top 10 Contributor
519 solutions 4870 answers

candyvincent16 said

Somebody else did he manages the address I just got evicted from and it wasn't trying to do something so he a so k me to look at it and I saw he had been in the jail

I have no idea what you are talking about .....

Does this have anything to do with the OP's question  ?

''candyvincent16 [[#answer-1153225|said]]'' <blockquote> Somebody else did he manages the address I just got evicted from and it wasn't trying to do something so he a so k me to look at it and I saw he had been in the jail </blockquote> I have no idea what you are talking about ..... Does this have anything to do with the OP's question ?
cor-el
  • Top 10 Contributor
  • Moderator
17412 solutions 157274 answers

Note that the screenshot shows dates in dd-mm-yyyy format, so this folder was modified September fourth and not in April. I also see an 'ff' folder with the same date and time.

Note that the screenshot shows dates in dd-mm-yyyy format, so this folder was modified September fourth and not in April. I also see an 'ff' folder with the same date and time.
cor-el
  • Top 10 Contributor
  • Moderator
17412 solutions 157274 answers
See also: *https://www.bleepingcomputer.com/forums/t/529786/dmw-process/ *https://www.google.com/search?q=%22AMozilla/AFirefox%22&nfpr=1&sa=X&biw=1024&bih=651

Question owner

I'v run malware bytes,FRST, combofix, superantispyware, TDSSKILLER,adwarecleaner It all comes clean I could just delete the folders and that would be the end of it . would it ?

I'v run malware bytes,FRST, combofix, superantispyware, TDSSKILLER,adwarecleaner It all comes clean I could just delete the folders and that would be the end of it . would it ?

Question owner

cor-el said

Note that the screenshot shows dates in dd-mm-yyyy format, so this folder was modified September fourth and not in April. I also see an 'ff' folder with the same date and time.

the date has nothing to do with anything. It doesnt matter when it was created.

''cor-el [[#answer-1153396|said]]'' <blockquote> Note that the screenshot shows dates in dd-mm-yyyy format, so this folder was modified September fourth and not in April. I also see an 'ff' folder with the same date and time. </blockquote> the date has nothing to do with anything. It doesnt matter when it was created.

Question owner

FFus3r said

it is a malware that uses a fake firefox to access some websites in the background. it came with some codecs you installed, i suggest you scan your system with malwarebytes in safe mode

iv already scanned the whole pc with a bunch of programs listed above, and it wont detect anything . WHY ???

i also want to mention that i do not get any popups with porn like the other guy said. i found that folder cause i saw the update.exe in the task manager . if i hadnt see that processes, i wouldn't have found that folder
''FFus3r [[#answer-1153222|said]]'' <blockquote> it is a malware that uses a fake firefox to access some websites in the background. it came with some codecs you installed, i suggest you scan your system with '''malwarebytes''' in '''safe mode''' </blockquote> iv already scanned the whole pc with a bunch of programs listed above, and it wont detect anything . WHY ??? i also want to mention that i do not get any popups with porn like the other guy said. i found that folder cause i saw the update.exe in the task manager . if i hadnt see that processes, i wouldn't have found that folder
FFus3r 50 solutions 757 answers

delete all files named Amozilla Afirefox.

delete all files named Amozilla Afirefox.
FFus3r 50 solutions 757 answers

after that run windows updates, and scan your system with these:

important you have to update these softwares before run the scan.

after that '''run windows updates''', and scan your system with these: * spybot search and destroy. * adwcleaner. * https://www.avast.com/c-adware ''' important''' you have to update these softwares before run the scan.

Question owner

FFus3r said

after that run windows updates, and scan your system with these: important you have to update these softwares before run the scan.

thats what i did but im sure there's leftovers in the registry too .

 all those programs are useless.. like seriously what are their purpose if they cannot detect that threat , and I've tried at least 10 programs to   and remove it . but none of them detected anything
''FFus3r [[#answer-1153868|said]]'' <blockquote> after that '''run windows updates''', and scan your system with these: * spybot search and destroy. * adwcleaner. * https://www.avast.com/c-adware ''' important''' you have to update these softwares before run the scan. </blockquote> thats what i did but im sure there's leftovers in the registry too . all those programs are useless.. like seriously what are their purpose if they cannot detect that threat , and I've tried at least 10 programs to and remove it . but none of them detected anything
FFus3r 50 solutions 757 answers

malwarebytes is designed specially for registry infections.

BUT try these:

after that delete every file with the name Amozilla Afirefox in safe mode .

malwarebytes is designed specially for registry infections. BUT try these: * https://www.hitmanpro.com/en-us.aspx * https://www.zemana.com/antimalware * https://www.malwarebytes.com/regassassin/ after that delete every file with the name Amozilla Afirefox in '''safe mode''' .