Avatar for Username

Vyhľadajte odpoveď

Vyhnite sa podvodom s podporou. Nikdy vás nebudeme žiadať, aby ste zavolali alebo poslali SMS na telefónne číslo alebo zdieľali osobné informácie. Nahláste prosím podozrivú aktivitu použitím voľby “Nahlásiť zneužitie”.

Ďalšie informácie

Táto téma bola archivovaná. Ak potrebujete pomôcť, založte prosím novú otázku.

A curious file in Program File\Mozilla Firefox folder

  • 2 odpovede
  • 1 má tento problém
  • 1 zobrazenie
  • Posledná odpoveď od SafeBrowser

SafeBrowser
SafeBrowser
more options

A curious file has appeared in my Program Files\Mozilla Firefox folder named: firefox.exe__ (yes, with 2 underscores after the name). It is 2,560 bytes in size and has a "Modified Date" of June 21, 2010 4:37:05 PM. Also on the Windows right-click Properties dialog is a note at the bottom in an area labeled "Security": "This file came from another computer and might be blocked to help protect this computer" with a button to "Unblock" is I so choose.

Of the 43 scan engines on Virustotal.com, only one (McAfee-GW-Edition 2010.1C 2010.11.17) shows it as suspect: Heuristic.BehavesLike.Win32.Spyware.J

Has anyone else seen this? Any clues?

A curious file has appeared in my Program Files\Mozilla Firefox folder named: firefox.exe__ (yes, with 2 underscores after the name). It is 2,560 bytes in size and has a "Modified Date" of June 21, 2010 4:37:05 PM. Also on the Windows right-click Properties dialog is a note at the bottom in an area labeled "Security": "This file came from another computer and might be blocked to help protect this computer" with a button to "Unblock" is I so choose. Of the 43 scan engines on Virustotal.com, only one (McAfee-GW-Edition 2010.1C 2010.11.17) shows it as suspect: ''Heuristic.BehavesLike.Win32.Spyware.J'' Has anyone else seen this? Any clues?

Všetky odpovede (2)

the-edmeister
the-edmeister
  • Moderator
more options

That file is too large to be a legitimate firefox.exe file, which are around 890kb for 3.5 & 3.6 versions. Right-click that file and open Properties, then look at the Version and Digital Signature tabs.

SafeBrowser
SafeBrowser Autor otázky
more options

Thanks for the reply.

No, the file is 2,560 bytes, not kbytes.

There is no "Version" tab in Properties; only "General", "Security" and "Summary" tabs. General tab shows usual information (3 dates, size, etc.) plus the "Security" information in my original question. Security tab shows users on my system (the usual ones that are valid) and Permissions (nothing out of the ordinary. Summary tab is all blank.

Have copied the file to another name, deleted original file (Shift+Delete so it did not go to the Recycle Bin) with no negative effects. Registry shows the path and the original file in the MRU list --- very curious.

Ever seen anything like this before?

Upravil(a) SafeBrowser dňa