Yes the extension is still installed. I disabled it and reset the browser settings, though already before asking here. I figured there might be some value in not deleting it. If you can tell me how to submit I'll do it.
I wasn't the one that installed it. The person who installed it told me they where searching for directions, and got a dialog on a page saying to download this to get directions. After they hit download it added the tool bar, the Fire Fox extension. changes the home page, and changed the search engine.
Not sure if this information will help:
I didn't see anything added to the download folder
No new applications in the applications folder
Safari and Chrome seamed untouched, no toolbars, no extensions, no search engine or home page changes.
I didn't see any strange applications in activity monitor
I didn't see any changes to DNS / Proxy settings
I didn't see anything under LaunchAgents or LaunchDaemons
I didn't check hidden files
I am far from a security expert though so it's possible I missed something.
Thank you for your help!
By the way I also did a did a quick run with Little Snitch after disabling it and did not see any strange connections.