cancel
Showing results for 
Search instead for 
Did you mean: 

Potentially malicious add-on added to firefox, web security keeper, what is it?

SOLVED
Highlighted
New User

Potentially malicious add-on added to firefox, web security keeper, what is it?

Earlier today, a friend of mine came to me complaining about no longer being able to access his web e-mail service that used Outlook 365. It worked on my laptop and my desktop, so it was a problem with his computer. I accessed his computer and attempted to use another browser. He originally was using Firefox and I went to use IE. It at first didn't work, but then I selected "Reset..." to reset literally every setting to default installation properties. I then tried to access Outlook 365 web e-mail and to my surprise it worked.

At this point, I knew it was browser issues, not a firewall issue or anything like that. After messing around with firefox's security settings, I tried disabling all extensions, to no avail. I then looked at the add-ons and saw something called "Web Security Keeper". It linked to a website that I will not post here for security reasons.

After doing some research, I see LITERALLY NOTHING on the web about this website or this add-on to firefox. I removed the add-on and suddenly everything worked flawlessly. If you look on the website, it is so poorly coded / vulnerable that it cannot possibly be a professional site. Furthermore, the "Download" button doesn't actually do anything as far as I could tell.

My friend had completely updated browsers/MBAM/Comodo Firewall/ESET NOD32 and isn't stupid. He also hasn't downloaded anything in 2 weeks and he has no idea where it came from. Does anyone have any information on this "add-on" ?

1 ACCEPTED SOLUTION

Accepted Solutions
New User

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

I have some information on this I would like to share!

I too had this addon, when it was installed... it was installed for both Chrome and FF at the same time. This addon appears to be a direct result of having ran a program I downloaded called "IOBit Uninstaller". (A program by IObit used to completely uninstall and remove all traces of programs, inluding registry entries".

It is my belief that this "IObit Uninstaller" is the root source of this...WebSecurityKeeper addon.

    • I came to this conclusion after thoroughly examining my Norton IS history logs, I noticed that the date/times this "addon" was installed & it's files were created matched EXACTLY the times this program was downloading/installing/running.

I would like to hear from anyone else if they have downloaded or installed ANYTHING from either "IObit.com" OR "FreeNew.net".

I was trying to download a program from IObit called "IObit_Uninstaller", the D/L link redirected me to "freenew.net", which then through again clicking on their D/L link, gave me "free_new_downloader_for_iobit_uninstaller.exe". This "downloader" attempted to access my net about 30 times, each time silently blocked by Norton. This was happening "while" it was downloading the IObit program.

THEN, when Norton checked and cleared this IObit_uninstaller.exe file, I obviously started that .exe file. Which then THAT file started Google Chrome, which in turn automatically downloaded this WebSecurityKeeper addon for bboth Chrome and FF...but never told me, never prompted me for anything.

So again... let me know if we have anything in common as far as how this came to be! I don't care what this addon 'does'... because I can't close it, it keeps popping back up and screwing up my browser... as far as I'm concerned, it's malicious!

    • Notice how when you go to WebSecurityKeeper.com... there is no corporate information?! Any company that makes LEGIT programs is going to have some sort of company information available. If not, then not legit!
18 REPLIES
Support Forum Moderator

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

Did you try using the Firefox Reset?

The Reset Firefox feature can fix many issues by restoring Firefox to its factory default state while saving your essential information. Note: This will cause you to lose any Extensions, Open websites, and some Preferences.

To Reset Firefox do the following:

  1. Go to Firefox > Help > Troubleshooting Information.
  2. Click the "Reset Firefox" button.
  3. Firefox will close and reset. After Firefox is done, it will show a window with the information that is imported. Click Finish.
  4. Firefox will open with all factory defaults applied.


Further information can be found in the Refresh Firefox - reset add-ons and settings article.

Did this fix your problems? Please report back to us!

New User

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

Did you try reading my post instead of using canned speeches? If you are going to post, at least put the time required to read my post, that way you could actually help me. I clearly already said "I removed the add-on and suddenly everything worked flawlessly."

I don't mean to be snippy, but please, don't give me canned speeches.

Support Forum Moderator

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

Like your search, I came up with nothing about "Web Security Keeper".

What do you expect? You didn't post the URL of that website, so there is nothing we can go by to even start to figure out what he has installed as an "add-on".

If that is an "add-on", the Reset should solve that problem. Besides that, if the "reset" worked in IE, why not try that in Firefox?

Site Moderator

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

@the-edmister, he already fixed the problem by removing the add-on, he is just wondering what the add-on is and if it's malicious.

@Wafflemonger, do you have more information, like the website this add-on came from? I can take a look and we can see if we need to blocklist it or not.

New User

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

@Tylerdowner the website is:

http://www.websecuritykeeper.com but as far as I can tell, as I said, the download button does nothing, unless I have security features preventing it from doing anything. My apologies for not posting the site originally, I didn't want random users coming by and clicking it and potentially getting infected.

Also, thank you for actually taking the time to read my post and question, I appreciate it.

Site Moderator

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

You are right, the download button doesn't work (it points to "#"). If you have the add-on install file somewhere I'd love to see it, otherwise I can't really do anything here (I can't find a copy of the addon to install and test). If I do get one we can potentially block this in the future.

New User

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

I have the extension folder. I archived the content (it says websecuritykeeper10@gmail.com as the ID) just in case there was no way to download it. How would you like me to provide it to you?

New User

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

Any ideas how this damn addon gets installed? Somehow it got installed to my Firefox without my permission. I didn't downloaded anything lately that can explain this addon's installation to my computer.

No clue how it was installed. And I discovered now that causes visual issues to my firefox - It shrinks drastically the text of the webpages such as google search, etc, making more difficult for me to read the pages.

I don't understand. Why a so called "security" addon is installed in a sneaky way to my PC?

Seriously I am worried now if it can steal our passwords stored in Firefox and send them to hackers?

New User

Re: Potentially malicious add-on added to firefox, web security keeper, what is it?

I had this problem too.,, i tried finding it, I disabled my add-on and plugins, nothing it turns out it was an Extension, so I removed that extension and restarted firefox.

title: firefox security component 1.0 website: iseekdeal_dot_com

i dont know how it was installed there, but the date was sometime in December

The visual (shrinking effect) only happened awhile ago, that's why i noticed it and it had a bottom tool bar for the Links to Web Security Keeper.