
firefox update triggers hitmanpro alert
Hi I have a question about last update today Firefox installed his automatic update to 55.03 (64bits) on a win10 pc but hitman pro is giving an alert to scan the pc for potential malware as its dicovered in the update and avised ot to use the browser. I did scan but both hitman pro and norton internet security says the pc is ok (what i expected it to be ) but the hitman pro keeps giving an alert on firefox when I start the program even on firefox in save mode with all add-ons off My suspicion that the new firefox update has some new code which is not recognized by hitmanpro yet Can you guy help me what going on ? thanks!
here is some info on the event : log:
Intruder PID 6552 Application C:\Program Files\Mozilla Firefox\firefox.exe Description Firefox 55.0.3 Detour Report
- Address Owner Disassembly
-- ------------------ ------------------------ ------------------------ PR_Close
1 0x00007FFF2C11E3B0 nss3.dll JMP 0x7fff00000311 2 0x00007FFF00000311 (unknown) MOV RAX, 0x2dfe72b0000 LOCK ADD DWORD [RAX+0x10], 0x1 CMP DWORD [RAX+0x14], 0x0 JZ 0x7fff0000038f JMP 0x7fff00000337 3 0x00007FFF00000337 (unknown)
PR_Read *
1 0x00007FFF2C11E3B8 nss3.dll JMP 0x7fff000005b3 2 0x00007FFF000005B3 (unknown) MOV RAX, 0x2dfe72b0000 LOCK ADD DWORD [RAX+0x10], 0x1 CMP DWORD [RAX+0x14], 0x0 JZ 0x7fff00000631 JMP 0x7fff000005cf 3 0x00007FFF000005CF (unknown)
PR_Write *
1 0x00007FFF2C11E3C0 nss3.dll JMP 0x7fff00000462 2 0x00007FFF00000462 (unknown) MOV RAX, 0x2dfe72b0000 LOCK ADD DWORD [RAX+0x10], 0x1 CMP DWORD [RAX+0x14], 0x0 JZ 0x7fff000004e0 JMP 0x7fff0000047e 3 0x00007FFF0000047E (unknown)
SSL_SetURL
1 0x00007FFF2C1AF8D4 nss3.dll JMP 0x7fff000001c2 2 0x00007FFF000001C2 (unknown) MOV RAX, 0x2dfe72b0000 LOCK ADD DWORD [RAX+0x10], 0x1 CMP DWORD [RAX+0x14], 0x0 JZ 0x7fff00000240 JMP 0x7fff000001e3 3 0x00007FFF000001E3 (unknown)
etc etc ....
All Replies (7)
Make sure those scanner programs are updated, program and data files.
Download Firefox For All languages And Systems {web link}
Save the file. Then Close Firefox.
Let’s do a full clean re-install;
Using your file browser, open the Programs Folder on your computer.
Windows: C:\Program Files C:\Program Files (x86)
Mac: Open the "Applications" folder. https://support.mozilla.org/en-US/kb/how-download-and-install-firefox-mac
Linux: Check your user manual. If you installed Firefox with the distro-based package manager, you should use the same way to uninstall it. See Install Firefox on Linux; https://support.mozilla.org/en-US/kb/install-firefox-linux
If you downloaded and installed the binary package from the Firefox download page, simply remove the folder Firefox in your home directory. http://www.mozilla.org/firefox#desktop ++++++++++++++++++++++++++++ Do Not remove the profiles folder.
Look for, and rename any Mozilla or Firefox program folders by adding .old to them. Do not rename the Mozilla Thunderbird folder if there is one.
After rebooting the computer, run a registry scanner if you have one. Then run the installer. If all goes well, remove the OLD folders when you are done. +++++++++++++++++++++++++++ If there is a problem, start your Computer in safe mode and try again.
http://encyclopedia2.thefreedictionary.com/Linux+Safe+Mode This shows how to Start all Computers in Safe Mode; Free Online Encyclopedia
thanks for you reply i did all you said , and did a clean reinstal , i must say again as that what the first things I did when it first happend, but the new install is still giving the same alert , just for Firefox not for Chrome or explorer , i hope there is more to try . Do you need more info ? let me now thanks Arthur
Anything you download from Mozilla is safe. Disable Hitman Pro to finnish the install. Also contact Hitman Pro support about this.
Hi Fred , I have no doubt the firefox is save I am sure of that , I am sure its an small bug between hitmanpro alert and firefox as it happend right after the update to 55.03 before that it was working fine together. I was hoping maybe more users had this bug and found an sollution for it. Of course I also contacted hitmanpro alert about this but they do not seem much impressed due to a lack of response .
so if theere is anyone with more idea's you are welcome thanks
additional info , hitman pro does let the program install completely, without any warning but when I start up the browser to browse , then I get the message there is an intruder in firefox , also when i start it clean and without any pugins on save mode i get this intruder message no mater what page loads
All good things suggested here. I would just also try another Malware Scanner just to be sure. Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.
- Microsoft Safety Scanner
- MalwareBytes' Anti-Malware
- Anti-Rootkit Utility - TDSSKiller
- AdwCleaner (for more info, see this alternate AdwCleaner download page)
- Hitman Pro
- ESET Online Scanner
Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista if you don't already have one. Windows 8/10 have antivirus protection built-in.
Further information can be found in the Troubleshoot Firefox issues caused by malware article.
This other person recently also had your issue: https://forums.malwarebytes.com/topic/209625-tradeadexchange-virus-not-detected/
After re-reading that, I would highly recommend a clean reinstall of Firefox: This process does not remove your Firefox profile data (such as bookmarks and passwords), since that information is stored in a different location.
To do a clean reinstall of Firefox, please follow these steps: Note: You might want to print these steps or view them in another browser.
- Download the latest Desktop version of Firefox from mozilla.org (or choose the download for your operating system and language from this page) and save the setup file to your computer.
- After the download finishes, close all Firefox windows (or open the Firefox menu
and click the close button
).
- Delete the Firefox installation folder, which is located in one of these locations, by default:
- Windows:
- C:\Program Files\Mozilla Firefox
- C:\Program Files (x86)\Mozilla Firefox
- Mac: Delete Firefox from the Applications folder.
- Linux: If you installed Firefox with the distro-based package manager, you should use the same way to uninstall it - see Install Firefox on Linux. If you downloaded and installed the binary package from the Firefox download page, simply remove the folder firefox in your home directory.
- Windows:
- Now, go ahead and reinstall Firefox:
- Double-click the downloaded installation file and go through the steps of the installation wizard.
- Once the wizard is finished, choose to directly open Firefox after clicking the Finish button.
More information about reinstalling Firefox can be found here.
WARNING: Do not use a third party uninstaller as part of this process. Doing so could permanently delete your Firefox profile data, including but not limited to, extensions, cache, cookies, bookmarks, personal settings and saved passwords. These cannot be easily recovered unless they have been backed up to an external device! See Back up and restore information in Firefox profiles.
Please report back to say if this helped you!
Thank you.
thanks Guigs , I did several scans with other scanners like malwarebytes , also hitmanpro alert , Norton Inter security, after scan says the pc is clean , how can I check firefox is connecting to a site like metioned: in the Further information can be found in the Troubleshoot Firefox issues caused by malware article. ?
there is no visible connection even with adblocker off and opening the browse with an blank page the only information I have about the bug is in the log , see my first post
thanks again for any help