Firefox Community Forum

I know some underpayed tech or a volunteer who's not getting paid at all is going to read this and not the CEO but my hope is I'm not only one complaining and that if enough people complain your new CEO will realize that the reason most people who use Firefox do is because it's the browser that respects their privacy and security the most. Adding "AI" slop into it will only contribute to bloat and privacy loss, and a lot of people will likely move on to another browser thats faster, more reliable, and less insecure. Don't try to compete with Chrome by becoming Chrome please.

Hello,

I downloaded the Firefox installer from the official website (https://www.mozilla.org/ru/firefox/download/thanks/). After downloading, I checked the SHA256 hash of the file: 051deb55cf9579e1f9b3bad71ec4a390353c568ef21849671953d08343b4e890.

However, this hash does not match any of the hashes listed on the official page: https://ftp.mozilla.org/pub/firefox/releases/133.0.3/SHA256SUMS.

Additionally, a VirusTotal scan flagged the file with a potential virus alert.

Could you clarify why there might be a discrepancy in the hash and whether this file could be legitimate?

Thank you.

Kaspersky just found this hidden in the Firefox cache folder and the funny part is that I don't even use Firefox that much. I didn't visit any sites on this particular Firefox except Facebook. So, what sort of malware is this? A Trojan stealer or a dropper of some sort? I am running a Full Scan for now and I have uninstalled all the browsers incl Firefox, Chrome. Detection name: Trojan.JS.Agent.exz

The details of Detection: Event: Object deleted User: DEMON-SLAYER-2\....... User type: Initiator Application name: avpui.exe Application path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22 Component: File Anti-Virus Result description: Deleted Type: Trojan Name: Trojan.JS.Agent.exz Precision: Exactly Threat level: High Object type: File Object name: 2309DFD956392BDFD0C84CA455FF6426B6B0FA9F Object path: C:\Users\......\AppData\Local\Mozilla\Firefox\Profiles\i2607jtb.default-release-1739822052193\cache2\entries MD5 of an object: 6FEC3D1DC6D1802AEADC4F8611A9F326

Since this is a Trojan, can this be Dangerous? I scanned it in virustotal and 33 engines were saying malware.

Virustotal link: https://www(dot)virustotal(dot)com/gui/file/2cee43e2e59ade158bfe5b124c07e9e45b7a378e379a8be8bb3272b10cf344e2/detection

Was reviewing my Settings. Looked under Privacy & Security, Browser Privacy, Certificates, View Certificates. The Certificate Manager has many listed under “Authorities.” Some look suspicious. How do I determine which are valid and which should be deleted?

For 2 days now I am overwhelmed with Firefox Security alerts about everything from Trojan Horses to system warnings. I know they are fake, but they are driving me crazy. Can anything be done about them?

I know I am far from the first person to bring this up, but it is absolutely horrid how a browser that is supposed to be one of the better options for privacy is starting to integrate more and more unwanted AI "features". None of us want this, nobody asked for this. Generative AI (including LLMs like ChatGPT and its equivalents) is horrific to even try to get a correct answer out of. It's simply processing your input and guessing what you want to hear in its output. It doesn't give facts, it doesn't help the user experience, it just makes things worse.

Every single time a new AI...thing is added, I have to go find a way to turn it off. If this keeps going, I cannot see a future where Firefox is a viable option for secure browsing. If anything, it may actually become on-par with or, dare I say worse than Google Chrome.

I'm getting announcements of a virus threat that purports to come from Mozilla Firefox. Usually one or all three of the attached small windows that say: 1. "Viruses Found. Antivirus notification. via https+++d512ucanaffc739fe48g.cgm-defender.pro" With a Dismiss button. 2. Attention! Click here to secure your data!. via https+++d512ucanaffc739fe48g.cgm-defender.pro" With a Dismiss button. 3. "System Warning!. Click here to remove them! via https+++d512ucanaffc739fe48g.cgm-defender.pro" With a Dismiss button. I have run full scans and offline scans with MS Defender, but these warnings still appear. Is this legit? I suspect these are a virus of some sort. Either way, how do I deal with this?

I attempted to put in an address of what I thought was a website today on mozilla. I soon found out that it was not available or a proper website.

Now I am getting alarming notices with heading Mozilla Firefox all via what looks like an Indian website, saying 1. Click to secure your 2. Trojan detected Fix it now. 3. Critical Error. Click here to remove them.

I have not clicked on any part apart from the x top right to remove the notifications. I can send photos of them

I have scanned with my Windows Security repeatedly and nothing.

Max

PS. The messages are obstinate to remove and it takes effort to x them.

i have a big problem with settings of privacy and security. the problem is i cant edit this option ( Allow Firefox to automatically trust third-party root certificates you install ) and its greyed out . i made everything ( refresh - troubleshoot - uninstall ) and with the first click on singing my account on Firefox and add my restore my add-ons after setting up windows this option become unavailable (greyed out) and cant edit it. i need a solution without going to set up a new windows because its so tiring to set up a new windows to edit this option. please give me a solution its emergency. thanks a lot.

Today as I got to work (Windows 11 machine), I had a suspicious Firefox.exe file on my Desktop, it was not a shortcut, but exe file. I did a little investigation and research, and I noticed some difference from Program Files exe file and Firefox.exe on my Desktop:

C:\Program Files\Mozilla Firefox\firefox.exe

Size: 695424 bytes SHA-256 hash: EEB242895F8ED48B43EAAA9ECA06C6DDE54425F8AE0E16200D2D46F839B9A540 File version: 145.0.0.327 Copyright: ©Firefox and Mozilla Developers Date modified: 16.11.2025 12:35 Original filename: firefox.exe Digital Signature: Mozilla Corporation

and Firefox.exe that appeared on Desktop

C:\Users\User\Desktop\Firefox.exe

Size: 389248 bytes SHA-256 hash: E8DA5735FE1B5E92BA3636B8D17B5BEC0EA521DB6A8B5A52177FF3E8B2F60710 File version: 145.0.0.327 Copyright: Licence: MPL 2 Date modified: 16.11.2025 12:35 Original filename: desktop-launcher.exe Digital Signature: Mozilla Corporation

I scanned both files in VirusTotal, and they both seems clean and legit

I uploaded both files to:

https://drive.google.com/file/d/1kALgQbfhIpHqs1pN6dmTdF71nm10LlD-/view?usp=sharing

Can somebody assure me that both files are OK, and can somebody explain to me why Firefox.exe appeared on my Desktop, and why is there difference between two files in size, Copyright info, and original filename ?

Also McAffee notification with all these popups stating that my McAffee protection expired yesterday - I have never had a McAffee notification for a virus or pair for protection from them. Popups are happening every 10 seconds continuously! looks like about 20 or more popups describing different problems with 20 digit numbers and letters as a serial number of the problem!

I am really frustrated by the additional AI features coming to Firefox soon. How can I ensure I will be notified as those features are rolled out, and how can I turn them off for my personal browser? To clarify, I don’t want any of my data, activity, or history to be accessible by any AI, and I don’t want to interact with any AI when I use Firefox.

What happened to Firefox's permission's page? There's so few options now. I'm being harassed by websites to give them permission that should be blocked across the entire browser. I'm autistic and sensitive to popups/interruptions/distractions. So most permissions I simply had off for everything, because I don't want to be asked anything. I don't want to confirm anything. I don't want any popup of any type. So I turned everything off and it was good. (except blocking cookies of course)

But now sites are asking me again and there's no way to blanket turn off everything. I see I can press "Ctrl+i" to bring up specific permissions for that site, but that's not good enough. I specifically need permissions blocked for sites I've never visited. Needing to visit the site first completely defeats the purpose.

The permissions listed in the settings isn't all of them. How do I turn off ALL permissions for ALL sites. I can turn on specific permissions when I want them. Essentially, how do I recreate functionality that used to exist but was removed from us for whatever reason.

Also, it's a huge security hole! I'm a senior full stack developer. Asking permissions for a user is a great way to fingerprint them. If I accidentally hit "yes" to a few key permissions, I can be fingerprinted. Another reason I should be able to blanket ban these permissions. I just want my browser to be a browser. These permissions do nothing for me but make the experience worse.

I am currently getting unwanted popups purporting to be from firefox about virus protection. I know they are fake because they report my McAfee license has expired, and it hasn't. I have McAfee scanning for viruses right now. They are generated over again when I close them; so I can't get rid of them.

Last few days I've been getting this popup:

Attention!!! Click to turn on the antivirus

or

Attention!!! Click to scan the device

obviously some phishing or something. How can I get rid of it?

I have picked up some bug(s) on my Firefox that I cannot figure out how to get rid of. With a Firefox ID I have warnings of 3 Trojan Virus detected, Virus detected, hard drive infected, secure data notice and system alert. I also got a warning that my McAfee protection had expired which is very strange. Since switching over in 2010 from Windows to Linux I have never had protection of any kind and unlike Windows have never had a single problem. In addition when I was using Windows the protection that I had was never McAfee. I suspect that these warnings are not from Firefox given the misprints, spelling errors and the poor English. It is likely phishing from some third world country. How do I get rid of this obvious garbage permanently? Many thanks! Kris

I recently started to get a"The security sandbox is disable" warning. I have already gone into about:config

my settings:

Content Process Sandbox Level 8 Effective Content Process Sandbox Level 0 (note in about:config this setting is 6?) Win32k Lockdown State for Content Process Win32k Lockdown enabled -- default value is true GPU Process Sandbox Level 1

Firefox ver 145.0.2 (64bit)