All Products Community Forum

I was prompted to install a .js file while on a website unrelated to mozilla organization. I was taking a work call and distracted at the time and was dumb enough to install it before I realized this was not a normal update. Should I uninstall and reinstall firefox? My McAfee blocked the script from "trying to hijack one of [my] apps"

woke up after doozing watching a yt video and on my pc i couldn't oppen firefox and it kept crashing so i just booted my pc again

After that i could open firefox but it had a yellow simbol on the three dot setting sections that stated "new tab has downloaded a new component"

i searched online and they said it could be an hijacker i refreshed firefox and run an anlysis with the base windows antivirus

the antivirus say's i'm clean but i still kinda unsure:

  was it really an infection? i ask myself if it could be just a firefox bug i checked extention before refreshing and the only one was 7tv and nothing else

  if it was an hijacker how can i fully know if i'm clean? what better steps can i take?

Does Firefox "remember" any browser data from another Windows user account? I created a guest account for someone today and while I was browsing, I got redirected to a site called fy3 dot fit which had the fake captcha. I did not open the run box and did not paste any commands from it, so is the guest account compromised or do I need to nuke Windows and start again? I read on reddit that it's an infostealer but if Firefox does not remember the other user account's browser data, does that mean nothing would be stolen if I did run it?

Hello, This extension is a scam, it stole my cryptocurrency account balance today after installing. Please check. https://addons.mozilla.org/en-US/firefox/addon/jupiter_mobile/

I accidentally clicked on a site that was supposed to be a game review site that I found on a Bing search. Now I get pop up ads for fake virus programs whenever I run Firefox.

I ran a scan with Mallware Bytes and Microsoft Defender and both scans came up clean.

I am including a screenshot of the popups.

Any ideas?

Thanks

Was prompted to download a program to Firefox before I paid my phone bill. I did not recognize the web address or name that was shown, and the account number from which recent payment was deducted did match any accounts I hold or held in the past. I cancelled the action immediately, without downloading, but am still concerned. I found nothing on the internet about this, just got a summation chat AI response that stated the phone company had no download/extension for Firefox. Has anyone had any experience like this or could someone shed some light on this?

On my Windows 11 computer messages keep cropping up supportably from Firefox. I have switched the computer off. this is from my old computer. I don't know what to do now. Colin

Kaspersky just found this hidden in the Firefox cache folder and the funny part is that I don't even use Firefox that much. I didn't visit any sites on this particular Firefox except Facebook. So, what sort of malware is this? A Trojan stealer or a dropper of some sort? I am running a Full Scan for now and I have uninstalled all the browsers incl Firefox, Chrome. Detection name: Trojan.JS.Agent.exz

The details of Detection: Event: Object deleted User: DEMON-SLAYER-2\....... User type: Initiator Application name: avpui.exe Application path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22 Component: File Anti-Virus Result description: Deleted Type: Trojan Name: Trojan.JS.Agent.exz Precision: Exactly Threat level: High Object type: File Object name: 2309DFD956392BDFD0C84CA455FF6426B6B0FA9F Object path: C:\Users\......\AppData\Local\Mozilla\Firefox\Profiles\i2607jtb.default-release-1739822052193\cache2\entries MD5 of an object: 6FEC3D1DC6D1802AEADC4F8611A9F326

Since this is a Trojan, can this be Dangerous? I scanned it in virustotal and 33 engines were saying malware.

Virustotal link: https://www(dot)virustotal(dot)com/gui/file/2cee43e2e59ade158bfe5b124c07e9e45b7a378e379a8be8bb3272b10cf344e2/detection

https://techcrunch.com/2025/10/14/mozillas-firefox-adds-perplexitys-ai-answer-engine-as-a-new-search-option/

I have zero interest in this nonsense malware being added, especially with their terrible reputation for security

I attempted to put in an address of what I thought was a website today on mozilla. I soon found out that it was not available or a proper website.

Now I am getting alarming notices with heading Mozilla Firefox all via what looks like an Indian website, saying 1. Click to secure your 2. Trojan detected Fix it now. 3. Critical Error. Click here to remove them.

I have not clicked on any part apart from the x top right to remove the notifications. I can send photos of them

I have scanned with my Windows Security repeatedly and nothing.

Max

PS. The messages are obstinate to remove and it takes effort to x them.

Today as I got to work (Windows 11 machine), I had a suspicious Firefox.exe file on my Desktop, it was not a shortcut, but exe file. I did a little investigation and research, and I noticed some difference from Program Files exe file and Firefox.exe on my Desktop:

C:\Program Files\Mozilla Firefox\firefox.exe

Size: 695424 bytes SHA-256 hash: EEB242895F8ED48B43EAAA9ECA06C6DDE54425F8AE0E16200D2D46F839B9A540 File version: 145.0.0.327 Copyright: ©Firefox and Mozilla Developers Date modified: 16.11.2025 12:35 Original filename: firefox.exe Digital Signature: Mozilla Corporation

and Firefox.exe that appeared on Desktop

C:\Users\User\Desktop\Firefox.exe

Size: 389248 bytes SHA-256 hash: E8DA5735FE1B5E92BA3636B8D17B5BEC0EA521DB6A8B5A52177FF3E8B2F60710 File version: 145.0.0.327 Copyright: Licence: MPL 2 Date modified: 16.11.2025 12:35 Original filename: desktop-launcher.exe Digital Signature: Mozilla Corporation

I scanned both files in VirusTotal, and they both seems clean and legit

I uploaded both files to:

https://drive.google.com/file/d/1kALgQbfhIpHqs1pN6dmTdF71nm10LlD-/view?usp=sharing

Can somebody assure me that both files are OK, and can somebody explain to me why Firefox.exe appeared on my Desktop, and why is there difference between two files in size, Copyright info, and original filename ?

This happens occasionally for many months. It is still happening on v147.0.1. I start the computer, open Firefox, and the browser loads previously viewed pages, including my Gmail account. The Gmail page has me already logged in, and I DID NOT provide my password! This has to be a big security risk. If some one were to use my computer, or it was stolen, they would have complete access to my Gmail and all Google properties! OS - Debian GNU/Linux 12 (bookworm) Kernel v6.1.0-42-amd64 Firefox v147.0.1 (and MANY previous versions)

Unable to find list of blocked email addresses. Went to "settings" / "Security & Privacy". No luck. I have no problem in deleting addresses. UNBLOCKING is eluding me.

In settings, it says Your browser is being managed by your organization. I clicked it and it led me to the policies page. In there it says Policy Name- Certificates, Policy value- ImportEnterpriseRoots and then true. I neither work in an organisation, nor I have any antivirus in my computer. Why is this happening?

I'm getting announcements of a virus threat that purports to come from Mozilla Firefox. Usually one or all three of the attached small windows that say: 1. "Viruses Found. Antivirus notification. via https+++d512ucanaffc739fe48g.cgm-defender.pro" With a Dismiss button. 2. Attention! Click here to secure your data!. via https+++d512ucanaffc739fe48g.cgm-defender.pro" With a Dismiss button. 3. "System Warning!. Click here to remove them! via https+++d512ucanaffc739fe48g.cgm-defender.pro" With a Dismiss button. I have run full scans and offline scans with MS Defender, but these warnings still appear. Is this legit? I suspect these are a virus of some sort. Either way, how do I deal with this?

Hello! Long time Firefox user here, grew up with a father working in IT security. He's mentioned this a few times before, but now we've both really noticed the push towards using generative AI in roles in IT where it's really unsuitable, and honestly quite a risk to security and privacy, not to mention quite a waste of time having to fact check things properly because I cannot even be sure that the first result in a Google search for "how far away is the moon" will be correct. We're quite concerned that Firefox is following suit, especially with the new CEO evidently not understanding some of the fundamentals of why this browser has such a dedicated user base. Just wondering if saving the money by not having to hire competent, trained professionals who can provide the human touch needed to run a browser is truly worth eroding Firefox's reputation of being the genuinely good alternative to Chrome? How long before the AI stops being optional? How much of the code is going to end up written by some language learning algorithm and passed off as safe? If this push is to continue, what alternatives does anyone in the community suggest? Thank you for any responses from both myself and my father :-)

On Windows 11 Pro, with the promotional McAfee app already uninstalled, the Firefox browser persistently presents what amounts to a Pop-up advertisement in the form of a fake new tab that remains in the background, unseen and left open even after one closes the browser session. How can this phenomenon be permanently terminated?

So, as I’m sure everyone has heard by now, the new CEO wants to make Firefox an “AI browser”. As a long time user, I think I speak for a lot of us when I say WE DON’T WANT THIS. In fact, the reason many of us were here is that Firefox was pretty much the last major browser not to give in to using generative AI for everything. I hope the CEO backtracks on this, or Firefox is going to lose a TON of users and money. Let’s go over the facts.

- Generative AI uses an unsustainable amount of energy and water, and AI data centers are responsible for a lot of air pollution. - AI tools are frequently incorrect, and lead to misinformation being spread. - Data is frequently scraped for AI training without user permission, and leaks are very common. This goes completely against Mozilla’s commitment to privacy, which was one of the big reasons I started using Firefox to begin with.

This announcement is very disappointing, and the CEO really needs to reconsider. Keep Firefox secure. Keep “AI” LLMs OUT.

Hi, When connecting to a HTTP:// site, when you enter your username in the username field, Firefox prompts the user with: "This connection is not secure. Logins entered here could be compromised. Learn More".

How can I turn this message off?

We are running Firefox in kiosk mode in the browser (on a Windows 11 PC), and they are logging into an HTTP site using a touch screen, but when they click into the username box, they sometimes miss touch where to enter this username and instead touch the link mentioned in the message. This then takes them to the Mozilla homepage, but because it is running in kiosk mode, they are unable to navigate back, and they are prevented from closing and restarting Firefox. This is why we need to turn the message off.