Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

A curious file in Program File\Mozilla Firefox folder

  • 2 个回答
  • 1 人有此问题
  • 1 次查看
  • 最后回复者为 SafeBrowser

SafeBrowser
SafeBrowser
more options

A curious file has appeared in my Program Files\Mozilla Firefox folder named: firefox.exe__ (yes, with 2 underscores after the name). It is 2,560 bytes in size and has a "Modified Date" of June 21, 2010 4:37:05 PM. Also on the Windows right-click Properties dialog is a note at the bottom in an area labeled "Security": "This file came from another computer and might be blocked to help protect this computer" with a button to "Unblock" is I so choose.

Of the 43 scan engines on Virustotal.com, only one (McAfee-GW-Edition 2010.1C 2010.11.17) shows it as suspect: Heuristic.BehavesLike.Win32.Spyware.J

Has anyone else seen this? Any clues?

A curious file has appeared in my Program Files\Mozilla Firefox folder named: firefox.exe__ (yes, with 2 underscores after the name). It is 2,560 bytes in size and has a "Modified Date" of June 21, 2010 4:37:05 PM. Also on the Windows right-click Properties dialog is a note at the bottom in an area labeled "Security": "This file came from another computer and might be blocked to help protect this computer" with a button to "Unblock" is I so choose. Of the 43 scan engines on Virustotal.com, only one (McAfee-GW-Edition 2010.1C 2010.11.17) shows it as suspect: ''Heuristic.BehavesLike.Win32.Spyware.J'' Has anyone else seen this? Any clues?

所有回复 (2)

the-edmeister
the-edmeister
  • Moderator
more options

That file is too large to be a legitimate firefox.exe file, which are around 890kb for 3.5 & 3.6 versions. Right-click that file and open Properties, then look at the Version and Digital Signature tabs.

SafeBrowser
SafeBrowser 提问者
more options

Thanks for the reply.

No, the file is 2,560 bytes, not kbytes.

There is no "Version" tab in Properties; only "General", "Security" and "Summary" tabs. General tab shows usual information (3 dates, size, etc.) plus the "Security" information in my original question. Security tab shows users on my system (the usual ones that are valid) and Permissions (nothing out of the ordinary. Summary tab is all blank.

Have copied the file to another name, deleted original file (Shift+Delete so it did not go to the Recycle Bin) with no negative effects. Registry shows the path and the original file in the MRU list --- very curious.

Ever seen anything like this before?

由SafeBrowser于修改