X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

Bogus Firefox 9.0.2?

Posted

Hi,

A member of my family has been running Firefox 9.0.1 happily on an Acer Aspire running Linux for several months, but recently he got an offer to update to version 9.0.2 which he accepted. The new version appears to be much slower and less reliable than the previous one, and no Mozilla site seems to refer to a Firefox 9.0.2 update. It still refers to itself as 9.0.1 in the About box. Is this update bogus?

Additional System Details

This happened

Every time Firefox opened

This started when...

The 9.0.2 update was installed.

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 10.1.2
  • Shockwave Flash 11.1 r102
  • Unity Player 3.4.2f3
  • Google Update
  • GEPlugin
  • 4.0.60831.0
  • Detector for the Onlive Game Client
  • NVIDIA 3D Vision Streaming plugin for Mozilla browsers
  • NVIDIA 3D Vision plugin for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers
  • Comrade Plugin
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Wacom Dynamic Link Library
  • Contribute Firefox IBE Plugin DLL
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Downloader Detector
  • iTunes Detector Plug-in
  • Office Authorization plug-in for NPAPI browsers
  • DLM Netscape Plugin (2.3.10.115)
  • getpluscorel15056
  • Free Realms Installer
  • Unity Player 2.5.1f5
  • Office Live Update v1.4

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0.1) Gecko/20100101 Firefox/9.0.1

More Information

knorretje 161 solutions 582 answers

Helpful Reply

Firefox 9.0.2 does not exist. Only download updates from the official websites.

Helpful Reply

Of course. However, according to him this update was offered via a pop-up box in the bottom right hand corner in the usual way. Clicking on the box did not lead to another website but performed the usual update install process within Firefox, with the download bar appearing at the bottom of the window. So if this was a bogus version, then the update process itself has been subverted.

I inspected the log file within the updates sub directory of the Firefox install and it showed that at the time he specified the Firefox updater itself did run and replaced all files in the Firefox install. The only apparent difference between the old version and the new was that the "default appearance" was in an extension directory.

The unreliability appeared to be caused by Flash Player, which was firing off a large number of "defunct plugin containers" and repeatedly running a script called sensemute which appeared to check the system volume., although something was also causing "sleep 300" processes to appear.

After disabling Flash Player I ran a packet sniffer on outputs from the laptop and the only sign of unauthorised network activity was intermittent messages being sent to omni-traffic.com.

the-edmeister
  • Top 10 Contributor
  • Moderator
3202 solutions 24441 answers

If he is running the version of Firefox that came with his Linux operating system, check with support for the distro of Linux being used on that device to see if they released a 9.0.2 update. Linux distros handle their own updates for all the programs that come with their distro, and updates for their version of Firefox don't come from the Mozilla update system.

Question owner

This update did, however, definitely come from the Mozilla update system.

the-edmeister
  • Top 10 Contributor
  • Moderator
3202 solutions 24441 answers

Mozilla never released a Firefox 9.0.2 version.

https://wiki.mozilla.org/Releases#Previous_Releases

Question owner

I'm aware of that. Nonetheless, what I stated in my post was true. A 9.0.2 update was claimed and the Firefox updater did run, replacing all files in the directory and adding an extension for "default appearance". How can I find out what this presumably bogus update has done to the system? My Dad is now too scared to use the web...

the-edmeister
  • Top 10 Contributor
  • Moderator
3202 solutions 24441 answers

Check the browsing history for this website - vkernel.org - if you want to look at that page disable Javascript before clicking that link, so you don't create a problem for yourself on your PC.

It is a web forgery that I have seen posted about here twice in the last week. I reported it to Google safe browsing as a web forgery on Tuesday or Wednesday, but it hasn't been added to their database yet. I don't think it would have had any affect in a Linux version of Firefox, the Javascript on that page is specifically for Windows PC's.