Jump to content

Search the Community

Showing results for 'firefox'.


Didn't find what you were looking for? Try searching for:


More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • ESET General Forums
    • ESET Announcements
    • General Discussion
    • Forum FAQ's and Rules
    • Submit a virus, website or potential false positive sample to the ESET lab
  • ESET Home User Products
    • ESET Internet Security & ESET Smart Security Premium
    • ESET NOD32 Antivirus
    • ESET Cyber Security (for Mac)
    • ESET Cyber Security Pro (for Mac)
    • ESET NOD32 Antivirus for Linux Desktop
    • ESET Products for Mobile Devices
    • Web portals
  • Malware Detection and Cleaning
    • Malware Finding and Cleaning
    • ESET Standalone Malware Removal Tools
  • ESET Business User Products
    • ESET Endpoint Products
    • ESET Products for Windows Servers
    • ESET Products for Linux Servers
    • ESET Products for Mobile Devices
    • Remote Management
    • ESET Enterprise Inspector (EDR)
    • ESET Products for Virtualized Environments
    • Encryption
    • ESET Licensing for Business
  • ESET Beta Products
    • ESET Beta Products for Home Users
    • ESET Beta Products for Business Users
  • Slovak and Czech forums
    • ESET NOD32 Antivirus, ESET Internet Security a ESET Smart Security Premium
    • Produkty pre mobilné zariadenia
    • Vírusy a iné hrozby
    • Ostatné

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Skype


Interests

Found 114 results

  1. I missed something in the recent VT analysis of this update.exe; aka firefox.exe. The below screen shot shows known processes that will startup/create this update.exe process. If you have uTorrent installed, that would be my prime suspect on how this puppy arrived on your PC: https://www.virustotal.com/gui/file/fb9045b74615a339fcdc3016f899aec5b8afbdacde5421d94d777c709295c2fd/relations
  2. I found the Error page today (2/28/20) and later found that -- IF I CLK LOGIN on THAT ERROR Page -- it opens to my Anti-Theft page as intended. Firefox 73.0.1 / New Edge Chrom got same error earlier.
  3. Thank you Marcos! I installed 4.0.93 and observed the same behavior so I submitted a ticket along with the customer_info.tgz. I discovered that Chrome also has issues streaming with NOD32 installed. If I try to watch a ‘twitch.tv’ stream, it will black out after a few minutes and sometimes I’ll get an error saying Chrome unexpectedly shut down”. Like with Firefox, disabling NOD32 doesn’t fix the problem, but uninstalling it completely does. I noticed that it requires some 32-bit libraries to run even though it’s supposed to be a 64-bit product. ‘libgtk2.0-0’ (for Ubuntu 19) & ‘libc6-i386’. Hopefully there's no conflict.
  4. Also note that from the Avast forum posting, Avast didn't detect this fake FireFox update.exe as malicious. It triggered on the outbound communication from it to a known malicious URL/IP address. My best guess is this bugger is legit software being used for other than legit purposes. Most likely for spyware purposes.
  5. Here's an old thread in the Avast forum dating from 2015 where the behavior observed was almost identical to that on your device: https://forum.avast.com/index.php?topic=92407.0 . The only difference here was the directory where the fake Firefox updater.exe was located was named ComObjects. The OP in this posting stated he had a "new build." This leads me believe that this software was installed by the OEM of the device. In any case, removing that startup entry for the software, prevented it from running thereafter. So my opinion is yes, you have eliminated whatever this thing was. If it reappears, I would start looking for any built-in diagnostic software or the like that was installed by the OEM of your device and uninstall that.
  6. I have a local account. I do not use online anytihng for this win10 debacle. I have SHUTUP switch off almost everything. I have no one drive, I have no microsoft accounts. microspasm have, over the years, clearly demonstrated their mistrust, disgust and lack of customer service for the very people who made them the global garbage patch they now are. As for a Linux recommendation, clearly, the front runner for new folk is Ubuntu. The GUI has evolved vastly over the years, it is stable, useful and easy to get to grips with. The standard desktop version contains all the workable software you would likely need. Installing more software is a doddle and there is a world of passionate, dedicated expert-like folk who will gladly offer any free assistance. There is NO activating online. There is (almost) no snooping - firefox, etc will have crash report info sent off but these things can easily be disabled. Almost everything you could want will be available as Open Source or GPL, etc so no worries about purchasing things. Virtualisation runs far better on the Linux platform than windows via KVM/QEMU. The only caveat that I have encountered is that cut/paste between host/guest and shared folders are a bit trickier to set up than would be the case with a windows setup. However, if you don't want a more hardware-centric virtualisation then you can still employ virtualbox which operates as well as virtualbox does anywhere. Software development tools do NOT require 10Gb or more of install as one gets with visual studio. By the same token, no registration is required such as microspasm force one into so they can spy on more of your activities. If one is a non-gaming user, Linux is ideal. If one is a business user, it could also be ideal but for the fact that the bulk of businesses use BackOffice tools - especially exchange/outlook; the latter of which has been altered so it is not so user-friendly any longer. I was weaned on UNIX (SYSV) and have been a ms/windows tech-type since MSDOS 3.x and windows 3. With every subsequent release, I have disliked windows less and UNIX-like more. The day windows is history will be a glorious day for the whole world! P.S. Once you feel confident enough you can even recompile your Linux kernel to streamline it to your tastes and speed-up your boot times. Personally, I have not recompiled a kernel since using Slakware but it is fun to try and would take far less time today than the 4-7 hours it used to take using pre-pentium intel chips back in 1993.
  7. i did wrote. IE11, firefox 73.0.1 (64-bit), chrome 80.0.3987.122 (Official Build) (64-bit) and in addition the latest Brave. It didn't login at all. shields up/down). All on win7 pro x64.
  8. Yes, Edge Firefox, and Opera. All the same results. What did you try?
  9. I know I have turned off cache on my firefox on my computer, i will re enable it
  10. I finally found a web reference to this Omnisoft fake FireFox garbage. Per this MalwareByte forum posting thread: https://forums.malwarebytes.com/topic/238865-mozilla-pops-up-with-pon-contents-whenever-i-boot-my-pc/?tab=comments#comment-1279613 . Initially it appeared that this might be a rootkit and Kaspersky's TDSS Killer: https://usa.kaspersky.com/downloads/tdsskiller got rid of it. However as the OP posted, looks like the bugger reinfected the installation somehow. This might have been via the previously noted startup entry the malware created. Do as @Nightowl suggested. Run a Custom scan ensuring all drives, folders, files, and networks are selected. Make sure the scan is run as Administrator by clicking on like named button. This should at least let us know if a rootkit is present or the MBR is infected.
  11. Something just occurred to me. This Omnisoft stuff might be related to some extension or the like you installed directly or inadvertently in FireFox. Perhaps something by Mozilla itself. This would at least explain the signed cert. by Mozilla for update.exe.
  12. This C:\program files x(86)\common files\omnisoft\update.exe obviously has nothing to do with FireFox. It's update program is located in its specific C:\program files x(86) or C:\program files directory. For this reason alone, I say the program has nefarious purposes. Software located in C:\program files x(86)\common files directory get there usually as a result of something you downloaded and was placed there via installer method. It could also be adware that that was embedded or possibly even a coin miner since you state it is using a lot of system resources. The first place to check is Windows installed programs via Control Manager for anything that you don't recollect manually installing. I would start by creating an Eset firewall rule to block any outbound traffic from C:\program files x(86)\common files\omnisoft\update.exe. Make sure you enable event alert and log entry creation. When the alert occurs copy the Eset Network protection log entries related to the outbound traffic and post them in a forum reply. This will give us an idea of the server IP addresses the bugger is trying to connect to.
  13. I can confirm this too, tested with Edge-Chromium latest (v80.0.361.57) and Firefox latest (v73.0.1). With Google Chrome latest (v80.0.3987.122) I get the ESET PUA Alert. (Win10 x64 1909, EIS 13.0.24.0)
  14. I'd suggest opening a support ticket with your local ESET distributor since the cause of the issue discussed in this topic was fixed by Mozilla in Firefox 73.0.1.
  15. Hello! ESET Internet Security 13.0.24.0 Win 7 Firefox 7.3 (x64) Today the Security Tools => Banking & Payment protection stopped working. I only get an empty window and when typing in my bankadress nothing opens. I've added the adresses in Security Tools => Banking & Payment protection => Protected websites and selected => Secured websites I tested the other options like "Ask me" and "Normal browser" but no go. Any advise on this please... I used to work like a charm. Thanks and best regards, elle
  16. A few final comments: 1. Never ever install a browser extension/add-on from a web site request. Always install the extension from the Store associated with that particular browser. 2. Never ever absolutely assume that a browser Store extension/add-on is 100% safe. Google notoriously and Firefox to a lesser extent do not test their Store extensions for malware prior to being placed in the Store. Apps are usually removed only after someone has discovered one is malicious or potentially unwanted status. 3. Configure your browser such that extensions/add-on's are not automatically added. In other words, you must manually allow the request. 4. AV solutions are as a rule are quite poor in detecting browser extension/add-on malware. This is because the app is not a stand-alone executable but running as a processing extension to the browser.
  17. Thanks for the info will look into it. Used to use firefox years ago but started having problems but think it was the PC I had at the time being too old. I've user chrome ever since and I do like how it syncs with android devices. However being Google theres always the concern of what they are collecting. I do have the new chromium based edge to but haven't really used it. I have also heard good things from Opera which even has a built in VPN
  18. Below is an example of how DNS monitoring is always present by your ISP. Now it is possible that Firefox DoH - Cloudflare servers fell back to DoT:
  19. We didn't find any issue with our code. In fact, reading the changelog for Firefox 73.0.1 showed that they fixed a couple of bugs some of which caused issues with BPP as well.
  20. I did find a workaround in FireFox though. Right mouse click on Google search result link. Then select either Open Link in New Tab or Window will produce the Eset PUA alert. Really not a practical solution.
  21. Yep Fixed my system too. Although to be fair I have not retested ESET with Firefox v73.0 t see it ESET have fixed it at their end.
  22. Hello I hope this is the correct place to post this query. I have sent messages to ESET support International and no one has replied yet. I have been a customer of ESET for more than 10 years and am extremely computer literate. Each year I have successfully renewed ESET using the Australian web portal, however at the moment all links to RENEW my ESET license via the Australian website DO NOT work right now. The link to renew inside the ESET GUI is also not working. Steps to replicate problem. Please note my I.P. is based in Australia, as I believe this may be part of the problem. 1. Go to this link: https://www.eset.com/au/support/existing-customers/ 2. Press Renew button 3. A re-direct then goes to this link: https://go.eset.com/renew/?_ga=2.268813942.684404668.1581554792-672009164.1581554792 4. Then it re-directs again and finally ends up here: https://www.eset.com/store/ On this page it reports a re-direct error and suggests to "Try clearing your cookies". I then clear my cookies, but this does not change a thing. 5. I have tried Google Chrome, Firefox, IE, Edge and Opera - all web browsers suffer from the same error. I managed to send a message to the Australian Support email address and they asked me to phone them to process my order. When I explained to them there was a problem with the AU website, they said "yeah we know about the problem, but don't know how to fix it" !!! When I asked if they had reported this to ESET headquarters, they had no interest in pursuing the matter any further. I can't believe they don't care about the website not working !? Does ESET International realize there is a problem with the Australian website ? My guess is that they must be loosing some customers because of this problem. Can someone please investigate this problem OR tell me who I can send a message to, to get it fixed ? I have uploaded some screen shots to show the problem. Regards Derek
  23. @itman I can confirm all your findings. Tested on Edge-Chromium, Firefox and Internet Explorer.
  24. Yes it seems that you get redirected to another servers while surfing this forum , you get redirected to some other servers owned by Invision , which can be blocked for some reasons , Firefox sometimes block it with BAD SIGNATURE error , and also the Fortinet
×
×
  • Create New...