Someone has access to an old device if mine, and is using my information to do things without my consent
Windows 11 Pro, Version 10.0.22631 Build 22631 Firefox, 126.0b8 (64-Bit) Hey, I use a personal firewall. Every unknown program that attempts to access the network trigg… (read more)
Windows 11 Pro, Version 10.0.22631 Build 22631 Firefox, 126.0b8 (64-Bit)
Hey,
I use a personal firewall. Every unknown program that attempts to access the network triggers a popup message requesting permission.
Right after the installation, Firefox.exe initiated a message, stating the following path: "C:\Program Files\Mozilla Firefox\firefox.exe". I granted access.
However, weeks after the installation, the updater.exe asked for permission, stating a very unusual path of itself. The path is "\device\harddiskvolume3\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe".
This seems unusual to me, since apps normally use 'C:\' to refer to harddiskdrive0. It is also suspect, since there are only two drives connected and the Disk Management tool (as an admin) indicates, that there are harddiskdrive0 and harddiskdrive1. There are no hard disk drives 2 or 3.
I also wondering about the fact, that the about firefox screen states, that firefox is up to date - even I did not granted access for the updater.exe in the past. There has never been a firwall rule to grant access for the updater.exe - how did it update in the past?
Does anybody have an idea what is happening?
Best regards, André
I was subscribed to a large distribution list, but then unsubscribed. But I didn't unsubscribe. So I subscribed again, but was soon unsubscribed again! My email address a… (read more)
I was subscribed to a large distribution list, but then unsubscribed. But I didn't unsubscribe. So I subscribed again, but was soon unsubscribed again! My email address and password may have been hacked. So I logged into my Comcast ISP and changed my email password. Then I started Thunderbird, and as expected, it asked for my password, and I gave it. My email came up. I tried sending an email and it asked for a sending password. I ignored it, but after a long delay, it refused to send the message. So I tried again, this time giving it my new email password. The sending then worked. I assumed all was now OK.
But, as a final test, I exited Thunderbird, and then restarted. It again came up OK with my emails shown. Then I again tried sending a test message to myself. But it again asked for my sending password! Thinking this might be a scam, I put in a password of "bullshit". Then I received the following popup message:
Sending of the message failed. An error occurred while sending mail. The mail server responded: Polite people say HELO first. Please verify that your email address is correct in your account settings and try again.
What!!! It sure seems like someone (at Thunderbird?) is in the loop grabbing my password before encoding it for storage. A similar thing happened in the past, where I think my account was hacked. So, was this a hacking attempt, and if so, was it from Thunderbird software or my Comcast ISP?