Possible Virus/Trojan
I just restarted my computer and McAfee just flagged/blocked the following: \AppData\Local\Packages\MozillaLLC.Firefox_cz44s8xhvj07r\LocalCache\Roaming\655984165098\packageNAME\libwsutil.dll Does anyone know what this is and is it actually safe and port of Firefox?
All Replies (5)
Anything found in the Firefox Cache is harmless if left alone to be overwritten or deleted by user.
https://support.mozilla.org/en-US/kb/how-clear-firefox-cache
Old article but still applies. "Firefox cache file was infected with a virus" https://support.mozilla.org/en-US/kb/Firefox%20cache%20file%20was%20infected%20with%20a%20virus
Modified by James (doing minimal support)
That looks like a file that belongs to an MSIX version from the MS Store. The Firefox MSIX version from the MS Store uses a path that is very similar.
- C:\Users\xxx\AppData\Local\Packages\Mozilla.Firefox_xxxxxxxxxxxxx\LocalCache\Roaming\Mozilla\Firefox
A Google search suggests that libwsutil.dll belongs to WireShark. Do you have this software ?
You can search the Windows registry for this file ans possibly this path.
Modified by cor-el
Cor-el I don't see that program or directory on my system
Did you check that file path ?
- \AppData\Local\Packages\MozillaLLC.Firefox_cz44s8xhvj07r\LocalCache\Roaming\655984165098
Note that in Windows "AppData" is a hidden folder.
Modified by cor-el
Cor-el It wasn't there. I did a search of my system and deleted any references to it and another file called mergecap that I was receiving errors on for not loading when I started my computer and was also looking for libwsutil, as I do not remember downloading either. They may be some type of add-on to Firefox, but again I did not request them.