Weird Things Happening Firefox for Developers (blocklist.xml ?)

2 antwoorden
1 heeft dit probleem
1 weergave
Laatste antwoord van crankygoat

4 jaar geleden

MacBook1212

13-01-2020 14:43

Hey all,

Going to keep this short - but, pretty sure devices have been compromised. Firefox has been acting strange lately. Opened up the package contents of the app (on macbook pro 2012) and saw a chrome manifest folder that seemed to be blocking web access on certain sites. Using a similar computer (with ff installed) and decided to look in the app folder. I saw a blocklist.xml sheet. Wondering if this is something that should be in there by default? Some of the things on the list, are things that i'd more likely need than not need. Here is a list of blocked sites and ip addresses. Any help is greatly appreciated.

Thanks,

 <emItems>
   <emItem blockID="i334" id="{0F827075-B026-42F3-885D-98981EE7B1AE}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i576" id="newmoz@facebook.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i326" id="/^((support2_en@adobe14\.com)|(XN4Xgjw7n4@yUWgc\.com)|(C7yFVpIP@WeolS3acxgS\.com)|(Kbeu4h0z@yNb7QAz7jrYKiiTQ3\.com)|(aWQzX@a6z4gWdPu8FF\.com)|(CBSoqAJLYpCbjTP90@JoV0VMywCjsm75Y0toAd\.com)|(zZ2jWZ1H22Jb5NdELHS@o0jQVWZkY1gx1\.com))$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i258" id="helperbar@helperbar.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="1.0" severity="1"/>
   </emItem>
   <emItem blockID="i692" id="/^(j003-lqgrmgpcekslhg|SupraSavings|j003-dkqonnnthqjnkq|j003-kaggrpmirxjpzh)@jetpack$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i218" id="ffxtlbr@claro.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i1137" id="/^({d50bfa5f-291d-48a8-909c-5f1a77b31948}|{d54bc985-6e7b-46cd-ad72-a4a266ad879e}|{d89e5de3-5543-4363-b320-a98cf150f86a}|{f3465017-6f51-4980-84a5-7bee2f961eba}|{fae25f38-ff55-46ea-888f-03b49aaf8812})$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i515" id="/^({bf9194c2-b86d-4ebc-9b53-1c08b6ff779e}|{61a83e16-7198-49c6-8874-3e4e8faeb4f3}|{f0af464e-5167-45cf-9cf0-66b396d1918c}|{5d9968c3-101c-4944-ba71-72d77393322d}|{01e86e69-a2f8-48a0-b068-83869bdba3d0})$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i722" id="{9802047e-5a84-4da3-b103-c55995d147d1}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i433" id="{c95a4e8e-816d-4655-8c79-d736da1adb6d}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i816" id="noOpus@outlook.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i818" id="contentarget@maildrop.cc">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i590" id="{94cd2cc3-083f-49ba-a218-4cda4b4829fd}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i746" id="{58d2a791-6199-482f-a9aa-9b725ec61362}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i238" id="/^pink@.*\.info$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3">
       <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
         <versionRange minVersion="18.0" maxVersion="*"/>
       </targetApplication>
     </versionRange>
   </emItem>
   <emItem blockID="i1414" id="/^new@kuot\.pro|{13ec6687-0b15-4f01-a5a0-7a891c18e4ee}|rebeccahoppkins(ty(tr)?)?@gmail\.com|{501815af-725e-45be-b0f2-8f36f5617afc}|{9bdb5f1f-b1e1-4a75-be31-bdcaace20a99}|{e9d93e1d-792f-4f95-b738-7adb0e853b7b}|dojadewaskurwa@gmail\.com$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i690" id="{55dce8ba-9dec-4013-937e-adbf9317d990">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i840" id="{4889ddce-7a83-45e6-afc9-1e4f1149fff4}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i168" id="flashX@adobe.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i1012" id="wxtui502n2xce9j@no14">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i516" id="/^({3f3cddf8-f74d-430c-bd19-d2c9147aed3d}|{515b2424-5911-40bd-8a2c-bdb20286d8f5}|{17464f93-137e-4646-a0c6-0dc13faf0113}|{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}|{aad50c91-b136-49d9-8b30-0e8d3ead63d0})$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i491" id="{515b2424-5911-40bd-8a2c-bdb20286d8f5}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i136" id="Adobe@flash.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i504" id="aytac@abc.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i848" id="bcVX5@nQm9l.org">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i680" id="jid1-bKSXgRwy1UQeRA@jetpack">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i582" id="discoverypro@discoverypro.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i846" id="PDVDZDW52397720@XDDWJXW57740856.com">
     <prefs>
       <pref>browser.startup.homepage</pref>
       <pref>browser.search.defaultenginename</pref>
     </prefs>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i922" id="{34712C68-7391-4c47-94F3-8F88D49AD632}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3">
       <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
         <versionRange minVersion="39.0a1" maxVersion="*"/>
       </targetApplication>
     </versionRange>
   </emItem>
   <emItem blockID="i142" id="{a3a5c777-f583-4fef-9380-ab4add1bc2a8}">
     <prefs/>
     <versionRange minVersion="4.2" maxVersion="4.2" severity="3"/>
     <versionRange minVersion="2.0.3" maxVersion="2.0.3" severity="3"/>
   </emItem>
   <emItem blockID="i578" id="jid1-XLjasWL55iEE1Q@jetpack">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i535" id="/^ext@WebexpEnhancedV1alpha[0-9]+\.net$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i1077" id="helper@vidscrab.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i566" id="{77BEC163-D389-42c1-91A4-C758846296A5}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i778" id="{f2456568-e603-43db-8838-ffa7c4a685c7}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i1024" id="{458fb825-2370-4973-bf66-9d7142141847}">
     <prefs>
       <pref>app.update.auto</pref>
       <pref>app.update.enabled</pref>
       <pref>app.update.interval</pref>
       <pref>app.update.url</pref>
     </prefs>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i856" id="/^({94d62e35-4b43-494c-bf52-ba5935df36ef}|firefox@advanceelite\.com|{bb7b7a60-f574-47c2-8a0b-4c56f2da9802})$/">

Hey all, Going to keep this short - but, pretty sure devices have been compromised. Firefox has been acting strange lately. Opened up the package contents of the app (on macbook pro 2012) and saw a chrome manifest folder that seemed to be blocking web access on certain sites. Using a similar computer (with ff installed) and decided to look in the app folder. I saw a blocklist.xml sheet. Wondering if this is something that should be in there by default? Some of the things on the list, are things that i'd more likely need than not need. Here is a list of blocked sites and ip addresses. Any help is greatly appreciated. Thanks, <?xml version='1.0' encoding='UTF-8'?> <blocklist xmlns="http://www.mozilla.org/2006/addons-blocklist" lastupdate="1578526685310"> <emItems> <emItem blockID="i334" id="{0F827075-B026-42F3-885D-98981EE7B1AE}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i576" id="newmoz@facebook.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i326" id="/^((support2_en@adobe14\.com)|(XN4Xgjw7n4@yUWgc\.com)|(C7yFVpIP@WeolS3acxgS\.com)|(Kbeu4h0z@yNb7QAz7jrYKiiTQ3\.com)|(aWQzX@a6z4gWdPu8FF\.com)|(CBSoqAJLYpCbjTP90@JoV0VMywCjsm75Y0toAd\.com)|(zZ2jWZ1H22Jb5NdELHS@o0jQVWZkY1gx1\.com))$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i258" id="helperbar@helperbar.com"> <prefs/> <versionRange minVersion="0" maxVersion="1.0" severity="1"/> </emItem> <emItem blockID="i692" id="/^(j003-lqgrmgpcekslhg|SupraSavings|j003-dkqonnnthqjnkq|j003-kaggrpmirxjpzh)@jetpack$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i218" id="ffxtlbr@claro.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i1137" id="/^({d50bfa5f-291d-48a8-909c-5f1a77b31948}|{d54bc985-6e7b-46cd-ad72-a4a266ad879e}|{d89e5de3-5543-4363-b320-a98cf150f86a}|{f3465017-6f51-4980-84a5-7bee2f961eba}|{fae25f38-ff55-46ea-888f-03b49aaf8812})$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i515" id="/^({bf9194c2-b86d-4ebc-9b53-1c08b6ff779e}|{61a83e16-7198-49c6-8874-3e4e8faeb4f3}|{f0af464e-5167-45cf-9cf0-66b396d1918c}|{5d9968c3-101c-4944-ba71-72d77393322d}|{01e86e69-a2f8-48a0-b068-83869bdba3d0})$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i722" id="{9802047e-5a84-4da3-b103-c55995d147d1}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i433" id="{c95a4e8e-816d-4655-8c79-d736da1adb6d}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i816" id="noOpus@outlook.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i818" id="contentarget@maildrop.cc"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i590" id="{94cd2cc3-083f-49ba-a218-4cda4b4829fd}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i746" id="{58d2a791-6199-482f-a9aa-9b725ec61362}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i238" id="/^pink@.*\.info$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"> <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}"> <versionRange minVersion="18.0" maxVersion="*"/> </targetApplication> </versionRange> </emItem> <emItem blockID="i1414" id="/^new@kuot\.pro|{13ec6687-0b15-4f01-a5a0-7a891c18e4ee}|rebeccahoppkins(ty(tr)?)?@gmail\.com|{501815af-725e-45be-b0f2-8f36f5617afc}|{9bdb5f1f-b1e1-4a75-be31-bdcaace20a99}|{e9d93e1d-792f-4f95-b738-7adb0e853b7b}|dojadewaskurwa@gmail\.com$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i690" id="{55dce8ba-9dec-4013-937e-adbf9317d990"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i840" id="{4889ddce-7a83-45e6-afc9-1e4f1149fff4}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i168" id="flashX@adobe.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i1012" id="wxtui502n2xce9j@no14"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i516" id="/^({3f3cddf8-f74d-430c-bd19-d2c9147aed3d}|{515b2424-5911-40bd-8a2c-bdb20286d8f5}|{17464f93-137e-4646-a0c6-0dc13faf0113}|{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}|{aad50c91-b136-49d9-8b30-0e8d3ead63d0})$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i491" id="{515b2424-5911-40bd-8a2c-bdb20286d8f5}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i136" id="Adobe@flash.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i504" id="aytac@abc.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i848" id="bcVX5@nQm9l.org"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i680" id="jid1-bKSXgRwy1UQeRA@jetpack"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i582" id="discoverypro@discoverypro.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i846" id="PDVDZDW52397720@XDDWJXW57740856.com"> <prefs> <pref>browser.startup.homepage</pref> <pref>browser.search.defaultenginename</pref> </prefs> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i922" id="{34712C68-7391-4c47-94F3-8F88D49AD632}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"> <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}"> <versionRange minVersion="39.0a1" maxVersion="*"/> </targetApplication> </versionRange> </emItem> <emItem blockID="i142" id="{a3a5c777-f583-4fef-9380-ab4add1bc2a8}"> <prefs/> <versionRange minVersion="4.2" maxVersion="4.2" severity="3"/> <versionRange minVersion="2.0.3" maxVersion="2.0.3" severity="3"/> </emItem> <emItem blockID="i578" id="jid1-XLjasWL55iEE1Q@jetpack"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i535" id="/^ext@WebexpEnhancedV1alpha[0-9]+\.net$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i1077" id="helper@vidscrab.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i566" id="{77BEC163-D389-42c1-91A4-C758846296A5}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i778" id="{f2456568-e603-43db-8838-ffa7c4a685c7}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i1024" id="{458fb825-2370-4973-bf66-9d7142141847}"> <prefs> <pref>app.update.auto</pref> <pref>app.update.enabled</pref> <pref>app.update.interval</pref> <pref>app.update.url</pref> </prefs> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i856" id="/^({94d62e35-4b43-494c-bf52-ba5935df36ef}|firefox@advanceelite\.com|{bb7b7a60-f574-47c2-8a0b-4c56f2da9802})$/">

Answer 1 · 2020-01-13 14:43:47

MacBook1212 Vraageigenaar

13-01-2020 14:43

     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i596" id="{b99c8534-7800-48fa-bd71-519a46cdc7e1}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i672" id="/^(saamazon@mybrowserbar\.com)|(saebay@mybrowserbar\.com)$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i228" id="crossriderapp5060@crossrider.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i378" id="{a7aae4f0-bc2e-a0dd-fb8d-68ce32c9261f}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i854" id="/^(7tG@zEb\.net|ru@gfK0J\.edu)$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i372" id="5nc3QHFgcb@r06Ws9gvNNVRfH.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i23" id="firefox@bandoo.com">
     <prefs/>
     <versionRange minVersion="5.0" maxVersion="5.0" severity="1">
       <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
         <versionRange minVersion="3.7a1pre" maxVersion="*"/>
       </targetApplication>
     </versionRange>
   </emItem>
   <emItem blockID="i548" id="/^firefox@(jumpflip|webconnect|browsesmart|mybuzzsearch|outobox|greygray|lemurleap|divapton|secretsauce|batbrowse|whilokii|linkswift|qualitink|browsefox|kozaka|diamondata|glindorus|saltarsmart|bizzybolt|websparkle)\.(com?|net|org|info|biz)$/">
     <prefs/>

Answer 2 · 2020-01-13 14:43:47

crankygoat

13-01-2020 15:08

Blocklist.xml is a normal file, and your file contents look normal. You'll likely find it in the root of your profile folders as well. This blocks installation of extensions and disables them if already installed. They are considered to be malware, adware, potentially unwanted, security risks, just plain broken, causing browser crashes or problems, etc.

It isn't blocking web access at all, and no websites are involved here aside from homepage hijacker preference settings. The extensions are listed by UUID or the old identifier format someextension@whatever.wxy.

[Edit: Forgot to give you a link where you can see all the blocked extensions listed. https://blocked.cdn.mozilla.net/ ]

If you have strange behaviour with Firefox to report, please open a new thread, and please be as specific as you can. Best wishes!

Bewerkt door crankygoat op 13 januari 2020 15:10:02 PST

Zoeken in Support

Weird Things Happening Firefox for Developers (blocklist.xml ?)

Alle antwoorden (2)

Een vraag stellen

Onze hulpartikelen verkennen

Mozilla-account

Zoeken in Support

Weird Things Happening Firefox for Developers (blocklist.xml ?)

Alle antwoorden (2)