Avatar for Username

Поиск в Поддержке

Избегайте мошенников, выдающих себя за службу поддержки. Мы никогда не попросим вас позвонить, отправить текстовое сообщение или поделиться личной информацией. Сообщайте о подозрительной активности, используя функцию «Пожаловаться».

Подробнее

Эта тема была архивирована. Если вам нужна помощь, задайте новый вопрос.

A curious file in Program File\Mozilla Firefox folder

  • 2 ответа
  • 1 имеет эту проблему
  • 2 просмотра
  • Последний ответ от SafeBrowser

SafeBrowser
SafeBrowser
more options

A curious file has appeared in my Program Files\Mozilla Firefox folder named: firefox.exe__ (yes, with 2 underscores after the name). It is 2,560 bytes in size and has a "Modified Date" of June 21, 2010 4:37:05 PM. Also on the Windows right-click Properties dialog is a note at the bottom in an area labeled "Security": "This file came from another computer and might be blocked to help protect this computer" with a button to "Unblock" is I so choose.

Of the 43 scan engines on Virustotal.com, only one (McAfee-GW-Edition 2010.1C 2010.11.17) shows it as suspect: Heuristic.BehavesLike.Win32.Spyware.J

Has anyone else seen this? Any clues?

A curious file has appeared in my Program Files\Mozilla Firefox folder named: firefox.exe__ (yes, with 2 underscores after the name). It is 2,560 bytes in size and has a "Modified Date" of June 21, 2010 4:37:05 PM. Also on the Windows right-click Properties dialog is a note at the bottom in an area labeled "Security": "This file came from another computer and might be blocked to help protect this computer" with a button to "Unblock" is I so choose. Of the 43 scan engines on Virustotal.com, only one (McAfee-GW-Edition 2010.1C 2010.11.17) shows it as suspect: ''Heuristic.BehavesLike.Win32.Spyware.J'' Has anyone else seen this? Any clues?

Все ответы (2)

the-edmeister
the-edmeister
  • Moderator
more options

That file is too large to be a legitimate firefox.exe file, which are around 890kb for 3.5 & 3.6 versions. Right-click that file and open Properties, then look at the Version and Digital Signature tabs.

SafeBrowser
SafeBrowser Задавший вопрос
more options

Thanks for the reply.

No, the file is 2,560 bytes, not kbytes.

There is no "Version" tab in Properties; only "General", "Security" and "Summary" tabs. General tab shows usual information (3 dates, size, etc.) plus the "Security" information in my original question. Security tab shows users on my system (the usual ones that are valid) and Permissions (nothing out of the ordinary. Summary tab is all blank.

Have copied the file to another name, deleted original file (Shift+Delete so it did not go to the Recycle Bin) with no negative effects. Registry shows the path and the original file in the MRU list --- very curious.

Ever seen anything like this before?

Изменено SafeBrowser