X
Thinta lapha ukuze uye kuveshini yamakhalekhukhwini kusayithi.

Isithangami Sabeseki

Lolu chungechunge lwabekwa kunqolobane. Uyacelwa ubuze umbuzo omusha uma udinga usizo.

fake folders AMozilla Afirefox

Kuphostiwe

C:\Users\Freedome\AppData\Roaming

in that pat there is a folder called AMozilla  and inside a folder called Afirefox and is full of files

us this imgur link to see screenshots of the content of the folder https://imgur.com/a/V62kKeE


theres also a Mozilla folder in

C:\Users\Freedome\AppData\Roaming

which one is real ?  is it a malware of some sort ?
C:\Users\Freedome\AppData\Roaming in that pat there is a folder called AMozilla and inside a folder called Afirefox and is full of files us this imgur link to see screenshots of the content of the folder https://imgur.com/a/V62kKeE theres also a Mozilla folder in C:\Users\Freedome\AppData\Roaming which one is real ? is it a malware of some sort ?

Eminye Imininingwane Yohlelo

Isisebenziso

  • I-ejenti Engumsebenzisi: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36

Eminye Imininingwane

Tyler Downer
  • Top 25 Contributor
  • Moderator
1525 izisombululo 10618 izimpendulo
Kuphostiwe

The one Firefox is using is the Mozilla one. Did you (or someone else) create those folders back in April?

I doubt it's malware, that would be a weird thing for malware to do

The one Firefox is using is the Mozilla one. Did you (or someone else) create those folders back in April? I doubt it's malware, that would be a weird thing for malware to do
McCoy
  • Top 10 Contributor
490 izisombululo 4513 izimpendulo
Kuphostiwe
Would you please take a look at : http://www.tomshardware.co.uk/answers/id-3783247/amozilla-afirefox-fake-folders.html And : http://www.tomsguide.com/answers/id-3783247/amozilla-afirefox-fake-folders.html Also : https://forums.malwarebytes.com/topic/225313-amozilla-afirefox/ Running (free) malware scans might be a good idea : https://www.malwarebytes.com/

Umnikazi wombuzo

''McCoy [[#answer-1153208|said]]'' <blockquote> Would you please take a look at : http://www.tomshardware.co.uk/answers/id-3783247/amozilla-afirefox-fake-folders.html And : http://www.tomsguide.com/answers/id-3783247/amozilla-afirefox-fake-folders.html Also : https://forums.malwarebytes.com/topic/225313-amozilla-afirefox/ Running (free) malware scans might be a good idea : https://www.malwarebytes.com/ </blockquote> I made those threads last night man

Umnikazi wombuzo

Tyler Downer said

The one Firefox is using is the Mozilla one. Did you (or someone else) create those folders back in April? I doubt it's malware, that would be a weird thing for malware to do

no I did not create those folders nor did someone else.

''Tyler Downer [[#answer-1153127|said]]'' <blockquote> The one Firefox is using is the Mozilla one. Did you (or someone else) create those folders back in April? I doubt it's malware, that would be a weird thing for malware to do </blockquote> no I did not create those folders nor did someone else.
FFus3r 50 izisombululo 757 izimpendulo
Kuphostiwe

Impendulo Ewusizo

it is a malware that uses a fake firefox to access some websites in the background.

it came with some codecs you installed, i suggest you scan your system with malwarebytes in safe mode

it is a malware that uses a fake firefox to access some websites in the background. it came with some codecs you installed, i suggest you scan your system with '''malwarebytes''' in '''safe mode'''
candyvincent16 0 izisombululo 1 izimpendulo
Kuphostiwe

Somebody else did he manages the address I just got evicted from and it wasn't trying to do something so he a so k me to look at it and I saw he had been in the jail

Somebody else did he manages the address I just got evicted from and it wasn't trying to do something so he a so k me to look at it and I saw he had been in the jail
McCoy
  • Top 10 Contributor
490 izisombululo 4513 izimpendulo
Kuphostiwe

sinoda said

I made those threads last night man

You are "gamendub" and "jelloboy1"  ?

I also said in my post :

" Running (free) malware scans might be a good idea : "

https://www.malwarebytes.com/

Would you  ?

''sinoda [[#answer-1153217|said]]'' <blockquote> I made those threads last night man </blockquote> You are "gamendub" and "jelloboy1" ? I also said in my post : "'' Running (free) malware scans might be a good idea : ''" https://www.malwarebytes.com/ Would you ?

Okulungisiwe ngu McCoy

McCoy
  • Top 10 Contributor
490 izisombululo 4513 izimpendulo
Kuphostiwe

candyvincent16 said

Somebody else did he manages the address I just got evicted from and it wasn't trying to do something so he a so k me to look at it and I saw he had been in the jail

I have no idea what you are talking about .....

Does this have anything to do with the OP's question  ?

''candyvincent16 [[#answer-1153225|said]]'' <blockquote> Somebody else did he manages the address I just got evicted from and it wasn't trying to do something so he a so k me to look at it and I saw he had been in the jail </blockquote> I have no idea what you are talking about ..... Does this have anything to do with the OP's question ?
cor-el
  • Top 10 Contributor
  • Moderator
17341 izisombululo 156769 izimpendulo
Kuphostiwe

Note that the screenshot shows dates in dd-mm-yyyy format, so this folder was modified September fourth and not in April. I also see an 'ff' folder with the same date and time.

Note that the screenshot shows dates in dd-mm-yyyy format, so this folder was modified September fourth and not in April. I also see an 'ff' folder with the same date and time.
cor-el
  • Top 10 Contributor
  • Moderator
17341 izisombululo 156769 izimpendulo
Kuphostiwe
See also: *https://www.bleepingcomputer.com/forums/t/529786/dmw-process/ *https://www.google.com/search?q=%22AMozilla/AFirefox%22&nfpr=1&sa=X&biw=1024&bih=651

Umnikazi wombuzo

I'v run malware bytes,FRST, combofix, superantispyware, TDSSKILLER,adwarecleaner It all comes clean I could just delete the folders and that would be the end of it . would it ?

I'v run malware bytes,FRST, combofix, superantispyware, TDSSKILLER,adwarecleaner It all comes clean I could just delete the folders and that would be the end of it . would it ?

Umnikazi wombuzo

cor-el said

Note that the screenshot shows dates in dd-mm-yyyy format, so this folder was modified September fourth and not in April. I also see an 'ff' folder with the same date and time.

the date has nothing to do with anything. It doesnt matter when it was created.

''cor-el [[#answer-1153396|said]]'' <blockquote> Note that the screenshot shows dates in dd-mm-yyyy format, so this folder was modified September fourth and not in April. I also see an 'ff' folder with the same date and time. </blockquote> the date has nothing to do with anything. It doesnt matter when it was created.

Umnikazi wombuzo

FFus3r said

it is a malware that uses a fake firefox to access some websites in the background. it came with some codecs you installed, i suggest you scan your system with malwarebytes in safe mode

iv already scanned the whole pc with a bunch of programs listed above, and it wont detect anything . WHY ???

i also want to mention that i do not get any popups with porn like the other guy said. i found that folder cause i saw the update.exe in the task manager . if i hadnt see that processes, i wouldn't have found that folder
''FFus3r [[#answer-1153222|said]]'' <blockquote> it is a malware that uses a fake firefox to access some websites in the background. it came with some codecs you installed, i suggest you scan your system with '''malwarebytes''' in '''safe mode''' </blockquote> iv already scanned the whole pc with a bunch of programs listed above, and it wont detect anything . WHY ??? i also want to mention that i do not get any popups with porn like the other guy said. i found that folder cause i saw the update.exe in the task manager . if i hadnt see that processes, i wouldn't have found that folder
FFus3r 50 izisombululo 757 izimpendulo
Kuphostiwe

delete all files named Amozilla Afirefox.

delete all files named Amozilla Afirefox.
FFus3r 50 izisombululo 757 izimpendulo
Kuphostiwe

after that run windows updates, and scan your system with these:

important you have to update these softwares before run the scan.

after that '''run windows updates''', and scan your system with these: * spybot search and destroy. * adwcleaner. * https://www.avast.com/c-adware ''' important''' you have to update these softwares before run the scan.

Umnikazi wombuzo

FFus3r said

after that run windows updates, and scan your system with these: important you have to update these softwares before run the scan.

thats what i did but im sure there's leftovers in the registry too .

 all those programs are useless.. like seriously what are their purpose if they cannot detect that threat , and I've tried at least 10 programs to   and remove it . but none of them detected anything
''FFus3r [[#answer-1153868|said]]'' <blockquote> after that '''run windows updates''', and scan your system with these: * spybot search and destroy. * adwcleaner. * https://www.avast.com/c-adware ''' important''' you have to update these softwares before run the scan. </blockquote> thats what i did but im sure there's leftovers in the registry too . all those programs are useless.. like seriously what are their purpose if they cannot detect that threat , and I've tried at least 10 programs to and remove it . but none of them detected anything
FFus3r 50 izisombululo 757 izimpendulo
Kuphostiwe

malwarebytes is designed specially for registry infections.

BUT try these:

after that delete every file with the name Amozilla Afirefox in safe mode .

malwarebytes is designed specially for registry infections. BUT try these: * https://www.hitmanpro.com/en-us.aspx * https://www.zemana.com/antimalware * https://www.malwarebytes.com/regassassin/ after that delete every file with the name Amozilla Afirefox in '''safe mode''' .