Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

"Webexp Enhanced V1" malware included in Firefox 26.0?

knowuthrume
knowuthrume
more options

After experiencing pop-ups upon clicking random non-hyperlinked text on various "safe" and familiar webpages, I suspected that malware was present. I noted "Webexp Enhanced V1" listed in Firefox "Add-ons" and in Control Panel -> Programs -> Programs and Features (with an 12/20/13 install date). The only updates/installations during the past 10 days have been "VLC Player 2.1.2", "Mozilla Maintenance Service" and "Mozilla Firefox 26.0".

Due to past experiences with Firefox + malware, I suspect the the malware was installed with one of the Firefox updates, but I would like to hear from others who have had similar experiences and will confirm or refute my suspicion.

I have easily and quickly uninstalled the malware. However, I wonder if there is something that can be done to preclude malware installation in the future.

Regards.

After experiencing pop-ups upon clicking random non-hyperlinked text on various "safe" and familiar webpages, I suspected that malware was present. I noted "Webexp Enhanced V1" listed in Firefox "Add-ons" and in Control Panel -> Programs -> Programs and Features (with an 12/20/13 install date). The only updates/installations during the past 10 days have been "VLC Player 2.1.2", "Mozilla Maintenance Service" and "Mozilla Firefox 26.0". Due to past experiences with Firefox + malware, I suspect the the malware was installed with one of the Firefox updates, but I would like to hear from others who have had similar experiences and will confirm or refute my suspicion. I have easily and quickly uninstalled the malware. However, I wonder if there is something that can be done to preclude malware installation in the future. Regards.

Chosen solution

I found a report on this on the VideoLan forum:

https://forum.videolan.org/viewtopic.php?f=14&t=116118 Webexp Enhanced V1 Malware Included in 2.1.2 update??

I don't know whether it's a coincidence that you also have VLC Media Player installed. Anyway, I see you already removed "Webexp Enhanced V1" from the Firefox Add-ons Extensions list and from Windows Control Panel -> Programs -> Programs and Features. You still need to scan for malware. See Troubleshoot Firefox issues caused by malware for recommended malware removal tools.

Read this answer in context 👍 2

All Replies (7)

AliceWyman
AliceWyman
  • Moderator
more options

Chosen Solution

I found a report on this on the VideoLan forum:

https://forum.videolan.org/viewtopic.php?f=14&t=116118 Webexp Enhanced V1 Malware Included in 2.1.2 update??

I don't know whether it's a coincidence that you also have VLC Media Player installed. Anyway, I see you already removed "Webexp Enhanced V1" from the Firefox Add-ons Extensions list and from Windows Control Panel -> Programs -> Programs and Features. You still need to scan for malware. See Troubleshoot Firefox issues caused by malware for recommended malware removal tools.

Modified by AliceWyman

AliceWyman
AliceWyman
  • Moderator
more options

Oops, I see that you're the one who posted the VideoLan forum thread. You still need to scan for malware, though. I would use all of the tools included at the end of the Troubleshoot Firefox issues caused by malware article.

There's been a bug report filed asking that this add-on be added to the Mozilla Blocklist, that you might want to vote for and follow:

viandy
viandy
more options

I had this problem today as well. Suddenly my Firefox got this add-on and it started showing these many ads when I was at walmart.com. I found that there is a way to get rid of these Ads by Webexp Enhanced for free with the help of a program that has full 15-day free trial, so you don't need pay any cent to remove this virus. This is the guide I found that tells how to remove this adware -Webexp Enhanced removal guide.

edgelore
edgelore
more options

This thread was very helpful. Today (12/24) I had a notification in FF that looked like the attached, and it was asking permission to install Webexp.

But I didn't recognize it, nor did I take any action that would have triggered the installation. It simply launched the following URL in a new tab's the address bar when FF started: SPACES ADDED / DO NOT CLICK about : newaddon?id = ext @ WebexpEnhancedV1alpha8264 .net SPACES ADDED / DO NOT CLICK

So how is this getting launched in FF automatically??? I'm on v26.0

Thankfully I found this thread and did NOT install it the add-on because I didn't trigger it or recognize it....

UPDATE: I'm seeing them in Chrome too now though, so they must be getting in some other way. Grrrr... running the removal... Can't think of anything I've installed recently. Hmmm....

Modified by edgelore

AliceWyman
AliceWyman
  • Moderator
more options

In case it helps:

P.S. Related AdblockPlus forum thread (screenshots included):

Modified by AliceWyman

knowuthrume
knowuthrume Question owner
more options

For all responses, thank you. I wanted to make sure that I had resolved the issues before I replied. I am certain that my computer was infected by sites that I had assumed were "friendly" and visit several times per day. MalwareBytes identified 40+ threats. I haven't had malware issues since. Needless to say, Firefox and VLC were faultless. Regards.

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Hi edgelore, I know you posted a month ago, but for reference, that dialog indicates Firefox discovered the new extension through its routine registry scan. If you go into the Windows Control Panel, Uninstall a Program (or Add/Remove Programs) and click the "Installed on" column heading, that can help in some cases to identify software that was bundled together and assist in tracking down how something new got onto your computer.