Weird Things Happening Firefox for Developers (blocklist.xml ?)

2 回覆
1 有這個問題
1 次檢視
最近回覆由 crankygoat

4 年前

MacBook1212

1/13/20, 2:43 PM

Hey all,

Going to keep this short - but, pretty sure devices have been compromised. Firefox has been acting strange lately. Opened up the package contents of the app (on macbook pro 2012) and saw a chrome manifest folder that seemed to be blocking web access on certain sites. Using a similar computer (with ff installed) and decided to look in the app folder. I saw a blocklist.xml sheet. Wondering if this is something that should be in there by default? Some of the things on the list, are things that i'd more likely need than not need. Here is a list of blocked sites and ip addresses. Any help is greatly appreciated.

Thanks,

 <emItems>
   <emItem blockID="i334" id="{0F827075-B026-42F3-885D-98981EE7B1AE}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i576" id="newmoz@facebook.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i326" id="/^((support2_en@adobe14\.com)|(XN4Xgjw7n4@yUWgc\.com)|(C7yFVpIP@WeolS3acxgS\.com)|(Kbeu4h0z@yNb7QAz7jrYKiiTQ3\.com)|(aWQzX@a6z4gWdPu8FF\.com)|(CBSoqAJLYpCbjTP90@JoV0VMywCjsm75Y0toAd\.com)|(zZ2jWZ1H22Jb5NdELHS@o0jQVWZkY1gx1\.com))$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i258" id="helperbar@helperbar.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="1.0" severity="1"/>
   </emItem>
   <emItem blockID="i692" id="/^(j003-lqgrmgpcekslhg|SupraSavings|j003-dkqonnnthqjnkq|j003-kaggrpmirxjpzh)@jetpack$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i218" id="ffxtlbr@claro.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i1137" id="/^({d50bfa5f-291d-48a8-909c-5f1a77b31948}|{d54bc985-6e7b-46cd-ad72-a4a266ad879e}|{d89e5de3-5543-4363-b320-a98cf150f86a}|{f3465017-6f51-4980-84a5-7bee2f961eba}|{fae25f38-ff55-46ea-888f-03b49aaf8812})$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i515" id="/^({bf9194c2-b86d-4ebc-9b53-1c08b6ff779e}|{61a83e16-7198-49c6-8874-3e4e8faeb4f3}|{f0af464e-5167-45cf-9cf0-66b396d1918c}|{5d9968c3-101c-4944-ba71-72d77393322d}|{01e86e69-a2f8-48a0-b068-83869bdba3d0})$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i722" id="{9802047e-5a84-4da3-b103-c55995d147d1}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i433" id="{c95a4e8e-816d-4655-8c79-d736da1adb6d}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i816" id="noOpus@outlook.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i818" id="contentarget@maildrop.cc">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i590" id="{94cd2cc3-083f-49ba-a218-4cda4b4829fd}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i746" id="{58d2a791-6199-482f-a9aa-9b725ec61362}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i238" id="/^pink@.*\.info$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3">
       <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
         <versionRange minVersion="18.0" maxVersion="*"/>
       </targetApplication>
     </versionRange>
   </emItem>
   <emItem blockID="i1414" id="/^new@kuot\.pro|{13ec6687-0b15-4f01-a5a0-7a891c18e4ee}|rebeccahoppkins(ty(tr)?)?@gmail\.com|{501815af-725e-45be-b0f2-8f36f5617afc}|{9bdb5f1f-b1e1-4a75-be31-bdcaace20a99}|{e9d93e1d-792f-4f95-b738-7adb0e853b7b}|dojadewaskurwa@gmail\.com$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i690" id="{55dce8ba-9dec-4013-937e-adbf9317d990">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i840" id="{4889ddce-7a83-45e6-afc9-1e4f1149fff4}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i168" id="flashX@adobe.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i1012" id="wxtui502n2xce9j@no14">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i516" id="/^({3f3cddf8-f74d-430c-bd19-d2c9147aed3d}|{515b2424-5911-40bd-8a2c-bdb20286d8f5}|{17464f93-137e-4646-a0c6-0dc13faf0113}|{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}|{aad50c91-b136-49d9-8b30-0e8d3ead63d0})$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i491" id="{515b2424-5911-40bd-8a2c-bdb20286d8f5}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i136" id="Adobe@flash.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i504" id="aytac@abc.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i848" id="bcVX5@nQm9l.org">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i680" id="jid1-bKSXgRwy1UQeRA@jetpack">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i582" id="discoverypro@discoverypro.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i846" id="PDVDZDW52397720@XDDWJXW57740856.com">
     <prefs>
       <pref>browser.startup.homepage</pref>
       <pref>browser.search.defaultenginename</pref>
     </prefs>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i922" id="{34712C68-7391-4c47-94F3-8F88D49AD632}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3">
       <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
         <versionRange minVersion="39.0a1" maxVersion="*"/>
       </targetApplication>
     </versionRange>
   </emItem>
   <emItem blockID="i142" id="{a3a5c777-f583-4fef-9380-ab4add1bc2a8}">
     <prefs/>
     <versionRange minVersion="4.2" maxVersion="4.2" severity="3"/>
     <versionRange minVersion="2.0.3" maxVersion="2.0.3" severity="3"/>
   </emItem>
   <emItem blockID="i578" id="jid1-XLjasWL55iEE1Q@jetpack">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i535" id="/^ext@WebexpEnhancedV1alpha[0-9]+\.net$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i1077" id="helper@vidscrab.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i566" id="{77BEC163-D389-42c1-91A4-C758846296A5}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i778" id="{f2456568-e603-43db-8838-ffa7c4a685c7}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i1024" id="{458fb825-2370-4973-bf66-9d7142141847}">
     <prefs>
       <pref>app.update.auto</pref>
       <pref>app.update.enabled</pref>
       <pref>app.update.interval</pref>
       <pref>app.update.url</pref>
     </prefs>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i856" id="/^({94d62e35-4b43-494c-bf52-ba5935df36ef}|firefox@advanceelite\.com|{bb7b7a60-f574-47c2-8a0b-4c56f2da9802})$/">

Hey all, Going to keep this short - but, pretty sure devices have been compromised. Firefox has been acting strange lately. Opened up the package contents of the app (on macbook pro 2012) and saw a chrome manifest folder that seemed to be blocking web access on certain sites. Using a similar computer (with ff installed) and decided to look in the app folder. I saw a blocklist.xml sheet. Wondering if this is something that should be in there by default? Some of the things on the list, are things that i'd more likely need than not need. Here is a list of blocked sites and ip addresses. Any help is greatly appreciated. Thanks, <?xml version='1.0' encoding='UTF-8'?> <blocklist xmlns="http://www.mozilla.org/2006/addons-blocklist" lastupdate="1578526685310"> <emItems> <emItem blockID="i334" id="{0F827075-B026-42F3-885D-98981EE7B1AE}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i576" id="newmoz@facebook.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i326" id="/^((support2_en@adobe14\.com)|(XN4Xgjw7n4@yUWgc\.com)|(C7yFVpIP@WeolS3acxgS\.com)|(Kbeu4h0z@yNb7QAz7jrYKiiTQ3\.com)|(aWQzX@a6z4gWdPu8FF\.com)|(CBSoqAJLYpCbjTP90@JoV0VMywCjsm75Y0toAd\.com)|(zZ2jWZ1H22Jb5NdELHS@o0jQVWZkY1gx1\.com))$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i258" id="helperbar@helperbar.com"> <prefs/> <versionRange minVersion="0" maxVersion="1.0" severity="1"/> </emItem> <emItem blockID="i692" id="/^(j003-lqgrmgpcekslhg|SupraSavings|j003-dkqonnnthqjnkq|j003-kaggrpmirxjpzh)@jetpack$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i218" id="ffxtlbr@claro.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i1137" id="/^({d50bfa5f-291d-48a8-909c-5f1a77b31948}|{d54bc985-6e7b-46cd-ad72-a4a266ad879e}|{d89e5de3-5543-4363-b320-a98cf150f86a}|{f3465017-6f51-4980-84a5-7bee2f961eba}|{fae25f38-ff55-46ea-888f-03b49aaf8812})$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i515" id="/^({bf9194c2-b86d-4ebc-9b53-1c08b6ff779e}|{61a83e16-7198-49c6-8874-3e4e8faeb4f3}|{f0af464e-5167-45cf-9cf0-66b396d1918c}|{5d9968c3-101c-4944-ba71-72d77393322d}|{01e86e69-a2f8-48a0-b068-83869bdba3d0})$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i722" id="{9802047e-5a84-4da3-b103-c55995d147d1}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i433" id="{c95a4e8e-816d-4655-8c79-d736da1adb6d}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i816" id="noOpus@outlook.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i818" id="contentarget@maildrop.cc"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i590" id="{94cd2cc3-083f-49ba-a218-4cda4b4829fd}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i746" id="{58d2a791-6199-482f-a9aa-9b725ec61362}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i238" id="/^pink@.*\.info$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"> <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}"> <versionRange minVersion="18.0" maxVersion="*"/> </targetApplication> </versionRange> </emItem> <emItem blockID="i1414" id="/^new@kuot\.pro|{13ec6687-0b15-4f01-a5a0-7a891c18e4ee}|rebeccahoppkins(ty(tr)?)?@gmail\.com|{501815af-725e-45be-b0f2-8f36f5617afc}|{9bdb5f1f-b1e1-4a75-be31-bdcaace20a99}|{e9d93e1d-792f-4f95-b738-7adb0e853b7b}|dojadewaskurwa@gmail\.com$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i690" id="{55dce8ba-9dec-4013-937e-adbf9317d990"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i840" id="{4889ddce-7a83-45e6-afc9-1e4f1149fff4}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i168" id="flashX@adobe.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i1012" id="wxtui502n2xce9j@no14"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i516" id="/^({3f3cddf8-f74d-430c-bd19-d2c9147aed3d}|{515b2424-5911-40bd-8a2c-bdb20286d8f5}|{17464f93-137e-4646-a0c6-0dc13faf0113}|{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}|{aad50c91-b136-49d9-8b30-0e8d3ead63d0})$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i491" id="{515b2424-5911-40bd-8a2c-bdb20286d8f5}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i136" id="Adobe@flash.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i504" id="aytac@abc.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i848" id="bcVX5@nQm9l.org"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i680" id="jid1-bKSXgRwy1UQeRA@jetpack"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i582" id="discoverypro@discoverypro.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i846" id="PDVDZDW52397720@XDDWJXW57740856.com"> <prefs> <pref>browser.startup.homepage</pref> <pref>browser.search.defaultenginename</pref> </prefs> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i922" id="{34712C68-7391-4c47-94F3-8F88D49AD632}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"> <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}"> <versionRange minVersion="39.0a1" maxVersion="*"/> </targetApplication> </versionRange> </emItem> <emItem blockID="i142" id="{a3a5c777-f583-4fef-9380-ab4add1bc2a8}"> <prefs/> <versionRange minVersion="4.2" maxVersion="4.2" severity="3"/> <versionRange minVersion="2.0.3" maxVersion="2.0.3" severity="3"/> </emItem> <emItem blockID="i578" id="jid1-XLjasWL55iEE1Q@jetpack"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i535" id="/^ext@WebexpEnhancedV1alpha[0-9]+\.net$/"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i1077" id="helper@vidscrab.com"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i566" id="{77BEC163-D389-42c1-91A4-C758846296A5}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i778" id="{f2456568-e603-43db-8838-ffa7c4a685c7}"> <prefs/> <versionRange minVersion="0" maxVersion="*" severity="3"/> </emItem> <emItem blockID="i1024" id="{458fb825-2370-4973-bf66-9d7142141847}"> <prefs> <pref>app.update.auto</pref> <pref>app.update.enabled</pref> <pref>app.update.interval</pref> <pref>app.update.url</pref> </prefs> <versionRange minVersion="0" maxVersion="*" severity="1"/> </emItem> <emItem blockID="i856" id="/^({94d62e35-4b43-494c-bf52-ba5935df36ef}|firefox@advanceelite\.com|{bb7b7a60-f574-47c2-8a0b-4c56f2da9802})$/">

Answer 1 · 2020-01-13 14:43:47

MacBook1212 提出問題者

1/13/20, 2:43 PM

     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i596" id="{b99c8534-7800-48fa-bd71-519a46cdc7e1}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i672" id="/^(saamazon@mybrowserbar\.com)|(saebay@mybrowserbar\.com)$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i228" id="crossriderapp5060@crossrider.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="1"/>
   </emItem>
   <emItem blockID="i378" id="{a7aae4f0-bc2e-a0dd-fb8d-68ce32c9261f}">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i854" id="/^(7tG@zEb\.net|ru@gfK0J\.edu)$/">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i372" id="5nc3QHFgcb@r06Ws9gvNNVRfH.com">
     <prefs/>
     <versionRange minVersion="0" maxVersion="*" severity="3"/>
   </emItem>
   <emItem blockID="i23" id="firefox@bandoo.com">
     <prefs/>
     <versionRange minVersion="5.0" maxVersion="5.0" severity="1">
       <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
         <versionRange minVersion="3.7a1pre" maxVersion="*"/>
       </targetApplication>
     </versionRange>
   </emItem>
   <emItem blockID="i548" id="/^firefox@(jumpflip|webconnect|browsesmart|mybuzzsearch|outobox|greygray|lemurleap|divapton|secretsauce|batbrowse|whilokii|linkswift|qualitink|browsefox|kozaka|diamondata|glindorus|saltarsmart|bizzybolt|websparkle)\.(com?|net|org|info|biz)$/">
     <prefs/>

Answer 2 · 2020-01-13 14:43:47

crankygoat

1/13/20, 3:08 PM

Blocklist.xml is a normal file, and your file contents look normal. You'll likely find it in the root of your profile folders as well. This blocks installation of extensions and disables them if already installed. They are considered to be malware, adware, potentially unwanted, security risks, just plain broken, causing browser crashes or problems, etc.

It isn't blocking web access at all, and no websites are involved here aside from homepage hijacker preference settings. The extensions are listed by UUID or the old identifier format someextension@whatever.wxy.

[Edit: Forgot to give you a link where you can see all the blocked extensions listed. https://blocked.cdn.mozilla.net/ ]

If you have strange behaviour with Firefox to report, please open a new thread, and please be as specific as you can. Best wishes!

由 crankygoat 於 January 13, 2020, 3:10:02 PM PST 修改

搜尋 Mozilla 技術支援網站

Weird Things Happening Firefox for Developers (blocklist.xml ?)

所有回覆 (2)

向網友求救

瀏覽我們的說明文件

Mozilla 帳號

搜尋 Mozilla 技術支援網站

Weird Things Happening Firefox for Developers (blocklist.xml ?)

所有回覆 (2)