I-Firefox Community Forum

Kaspersky just found this hidden in the Firefox cache folder and the funny part is that I don't even use Firefox that much. I didn't visit any sites on this particular Firefox except Facebook. So, what sort of malware is this? A Trojan stealer or a dropper of some sort? I am running a Full Scan for now and I have uninstalled all the browsers incl Firefox, Chrome. Detection name: Trojan.JS.Agent.exz

The details of Detection: Event: Object deleted User: DEMON-SLAYER-2\....... User type: Initiator Application name: avpui.exe Application path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22 Component: File Anti-Virus Result description: Deleted Type: Trojan Name: Trojan.JS.Agent.exz Precision: Exactly Threat level: High Object type: File Object name: 2309DFD956392BDFD0C84CA455FF6426B6B0FA9F Object path: C:\Users\......\AppData\Local\Mozilla\Firefox\Profiles\i2607jtb.default-release-1739822052193\cache2\entries MD5 of an object: 6FEC3D1DC6D1802AEADC4F8611A9F326

Since this is a Trojan, can this be Dangerous? I scanned it in virustotal and 33 engines were saying malware.

Virustotal link: https://www(dot)virustotal(dot)com/gui/file/2cee43e2e59ade158bfe5b124c07e9e45b7a378e379a8be8bb3272b10cf344e2/detection

My browser is being managed by "your organization" but I belong to NO organization. How do I regain control of my own browser?

Message reads: "Your browser is being managed by your organization" Please help me regain control of my browser!

Regards

I have received 3 system alerts, all from Mozilla Firefox (I use Firefox as my default browser). 1) System is infected!---click on d45n9f8ko90s738b610.gsx-protect.co.in 2) ZEUS.2020 Trojan detected--with same directed site 3) System Alert!---with same directed site.

I use McAfee as my security system. They recommend going to Firefox settings and disallowing random site connections. How do I get my system running again.

Latest McAfee scan shows 45 entries deleted and 2 browsers reset

At the top of my settings it says: Information: Your browser is being managed by your organization.

What does this mean? It's my personal laptop, I bought it myself and I don't work for any organization.

Thanks for your help. Nancy

Hey, I am currently working on an application where I want to upload files to a server using mtls via a webapp. The upload goes to another url and server than the one where the webapp is served from. If I test the file uploading without mTLS, it succeeds, and with mTLS enabled it also works in chromium, but in Firefox I get the following error: "Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at <url> (Reason: CORS request did not succeed). Status code: (null)." on the `OPTIONS` request before the `PUT` is done. The client and the server both have a certificate from a custom CA, which I imported into firefox, along with the private key. Does someone know what the issue here might be? I am suspecting that there is some problem with firefox loading the user certificate on the preflight request?

Hi guys,

I'm on my personal computer and personal account and my "network administrator" (which I don't have) has turned on restricted mode in YouTube so I can't read comments on videos etc. I know I need to change my browser security settings, but I don't know to what exactly. Can anyone help? The restricted mode is infuriating me.

Hello Firefox Developers,

No pressure for this item.

I would like to request that there be an option to censor or hide the Firefox user information in the Firefox UI and in the Settings section for privacy and security reasons, especially when doing online streams or making online guides.

At least an option to either make it "l.............@..." with an eye option beside it. Like what the password field behaviour is in online forms.

It would be nice if the option were available to the end-users.

Thank you so much.

every download gets stopped with "This file contains a virus or malware", have to click on the file, then click "allow download" every time!

I check the file with my antivirus and it finds NOTHING!

To protect your security, abc.trilineenterprises.in will not allow Firefox to display the page if another site has embedded it. To see this page, you need to open it in a new window.why

Firefox detected a potential security threat and did not continue to myccp.ccp.edu. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.

I noticed yesterday, firefox is saving cookies from Private Browsing Windows after those windows have been closed.

See attached screen shots.

I did not change any settings. The only 'new' thing is I added AdGuard about 2 weeks ago.

Thanks

Hi. I'm on Tahoe since 24 hours. I have Lulu installed. Lulu blocked an outgoing connection called ping sender that wants to connect to 34.120.208.123 and is related to Mozilla as Lulu says. But when I run a whois on this ip I get

NetRange: 34.64.0.0 - 34.127.255.255 CIDR: 34.64.0.0/10 NetName: GOOGL-2 NetHandle: NET-34-64-0-0-1 Parent: NET34 (NET-34-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Google LLC (GOOGL-2) RegDate: 2018-09-28 Updated: 2018-09-28 Ref: https://rdap.arin.net/registry/ip/34.64.0.0

OrgName: Google LLC OrgId: GOOGL-2 Address: 1600 Amphitheatre Parkway City: Mountain View StateProv: CA PostalCode: 94043 Country: US RegDate: 2006-09-29 Updated: 2019-11-01 Comment: *** The IP addresses under this Org-ID are in use by Google Cloud customers *** Comment: Comment: Direct all copyright and legal complaints to Comment: https://support.google.com/legal/go/report

In Lulu I have ▪ /Applications/Firefox Developer Edition.app/Contents/MacOS/pingsender

WTF?????????

II must have been onto a dangerous site ??? but anyway I was using another browser and Firefox popped up with messages indicating a virus. As I am a retired head of IT, I closed internet and uninstalled Firefox. I then scanned my Pc with 3 different antivirus packages, My default installed is Sophos. Then there is teh standard MS , plus I installed ESET. All cleared my machine with no issues. I then re- installed Firefox, , it picked up my data and the virus message popped up again. I immediately uninstalled it again. I use REVO to uninstall, which scans for left overs, which I delete as well. Now I HAVE TO ASSUME that Revo is NOT clearing ALL FIREFOX files/data off my PC. Please advise where it is and how I can delete it completely, which is causing the messages to pop up again as soon as i install Firefox.

I was asked to 'Allow Chatgpt.com to store data in persistent storage'. Would that add on the risk of having my data being more exposed and kept by stakeholders not of my own choice?