Avatar for Username

Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

En savoir plus

Ce sujet de discussion a été archivé. Veuillez poser une nouvelle question si vous avez besoin d’aide.

A curious file in Program File\Mozilla Firefox folder

  • 2 réponses
  • 1 a ce problème
  • 2 vues
  • Dernière réponse par SafeBrowser

SafeBrowser
SafeBrowser
more options

A curious file has appeared in my Program Files\Mozilla Firefox folder named: firefox.exe__ (yes, with 2 underscores after the name). It is 2,560 bytes in size and has a "Modified Date" of June 21, 2010 4:37:05 PM. Also on the Windows right-click Properties dialog is a note at the bottom in an area labeled "Security": "This file came from another computer and might be blocked to help protect this computer" with a button to "Unblock" is I so choose.

Of the 43 scan engines on Virustotal.com, only one (McAfee-GW-Edition 2010.1C 2010.11.17) shows it as suspect: Heuristic.BehavesLike.Win32.Spyware.J

Has anyone else seen this? Any clues?

A curious file has appeared in my Program Files\Mozilla Firefox folder named: firefox.exe__ (yes, with 2 underscores after the name). It is 2,560 bytes in size and has a "Modified Date" of June 21, 2010 4:37:05 PM. Also on the Windows right-click Properties dialog is a note at the bottom in an area labeled "Security": "This file came from another computer and might be blocked to help protect this computer" with a button to "Unblock" is I so choose. Of the 43 scan engines on Virustotal.com, only one (McAfee-GW-Edition 2010.1C 2010.11.17) shows it as suspect: ''Heuristic.BehavesLike.Win32.Spyware.J'' Has anyone else seen this? Any clues?

Toutes les réponses (2)

the-edmeister
the-edmeister
  • Moderator
more options

That file is too large to be a legitimate firefox.exe file, which are around 890kb for 3.5 & 3.6 versions. Right-click that file and open Properties, then look at the Version and Digital Signature tabs.

SafeBrowser
SafeBrowser Auteur de la question
more options

Thanks for the reply.

No, the file is 2,560 bytes, not kbytes.

There is no "Version" tab in Properties; only "General", "Security" and "Summary" tabs. General tab shows usual information (3 dates, size, etc.) plus the "Security" information in my original question. Security tab shows users on my system (the usual ones that are valid) and Permissions (nothing out of the ordinary. Summary tab is all blank.

Have copied the file to another name, deleted original file (Shift+Delete so it did not go to the Recycle Bin) with no negative effects. Registry shows the path and the original file in the MRU list --- very curious.

Ever seen anything like this before?

Modifié le par SafeBrowser