Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Please explain repeated downloads/updates of RadioWMPCoreGecko19.dll into a Mozilla folder. Thankyou.

  • 5 replies
  • 9 have this problem
  • 1 view
  • Last reply by cor-el

more options

Norton anti-virus popup tells me that the mentioned .dll is a safe auto-download file. This has been happening often. Can Mozilla confirm these actions as their own.

Thank you. annode

Norton anti-virus popup tells me that the mentioned .dll is a safe auto-download file. This has been happening often. Can Mozilla confirm these actions as their own. Thank you. annode

Chosen solution

A user in this thread - https://support.mozilla.org/en-US/questions/878063 - say that file is part of a "WeLoveMusic (Or something like that) toolbar".

Here - http://regrunreanimator.com/research/download-managers/%C2%B5torrent/radiowmpcoregecko19-dll.htm - is says it is part of a uTorrent toolbar. Also, it is probably part of other Conduit Toolbar add-ons, a sketchy organization (my opinion) that was once banned from the official add-ons website.

It probably has "Gecko" in its' name because it was made specifically for Gecko-based browers, and maybe to make users think it is a useful file, instead of a DLL file which is closely aligned with Malware. Somebody who is getting that "message" from Norton needs to run a search (For Files and Folders) in Windows and tell us exactly where that file is located (as I requested in the first link I posted), so we can maybe figure out what installed that file.

Read this answer in context 👍 1

All Replies (5)

more options

Nope, Mozilla didn't install those RadioWMPCoreGecko##.dll files, they were installed by a 3rd party plugin.

more options

Thanks for replying edmeister. From the bit of research i`ve just done, it appears that "Gecko" is part of Firefox as it`s engine...according to this; http://www.useragentstring.com/Firefox9.0.1_id_19070.php

I don`t understand such things...and I hope I didn`t screw my Firefox after deleting "Gecko" keys in my registry!

If it`s a 3rd party file, I haven`t found a definitive explanation for it yet.

more options

Chosen Solution

A user in this thread - https://support.mozilla.org/en-US/questions/878063 - say that file is part of a "WeLoveMusic (Or something like that) toolbar".

Here - http://regrunreanimator.com/research/download-managers/%C2%B5torrent/radiowmpcoregecko19-dll.htm - is says it is part of a uTorrent toolbar. Also, it is probably part of other Conduit Toolbar add-ons, a sketchy organization (my opinion) that was once banned from the official add-ons website.

It probably has "Gecko" in its' name because it was made specifically for Gecko-based browers, and maybe to make users think it is a useful file, instead of a DLL file which is closely aligned with Malware. Somebody who is getting that "message" from Norton needs to run a search (For Files and Folders) in Windows and tell us exactly where that file is located (as I requested in the first link I posted), so we can maybe figure out what installed that file.

more options

I read the other replies you linked to. Here`s it`s route; E:\Documents and Settings\Barry\Application Data\Mozilla\Firefox\Profiles\knr3vdtj.default\extensions\{915793b2-0a75-4c84-8ed7-479086c6d84e}\components

I do have a 3rd party toolbar from "Nirsoft"that I got from the Firefox site a long ways back...and it updates itself as a Firefox add-on/extension soon after. It has a net radio and net tv section built into it. The tv vid player app uses WMP. The toolbar uses it`s own GUI for the radio section.

Funny though, "Conduit" is also in that folder...but it appears to handle the search engine feature of the toolbar. I never see adverts or blocked popups...but I have to say, it`s really a strange thing when you see the Norton pop-up....and you know it has dloaded that same xxx19.dll many times over the last 2 weeks. That`s just too weird.

more options

That is a component added by an extension.
You can open the install.rdf file in that extensions\{GUID} folder to see to which extension it belongs.