jotto

Kevin - My apology for my assumption. In that case an even bigger 'Thank you' for your time and assistance and VOLUNTEERING TO HELP. We will eagerly look for any updates. Jon

Kevin. DelFix has been run. I will touch base if the prior false firefox patch is seen again. Maybe your software will detect it by then. Thank you. Jon

Kevin. redownloaded and ran FRST Logs are attached. i see nothing, do you??? I removed Firefox and reinstalled Firefox I used the default download for a 64-bit win 81 and was given 51.0.1 for 32-bit - which is what was here. Bookmarks were reimported. It will be a matter of time to see if the fake patch is offered again. Thank you for your time. Jon Addition.txt FRST.txt Search.txt SearchReg.txt

HI Kevin. Good catch. What I was originally reporting was that Malewarebytes was not detecting any problem when we received fake updates for Firefox for something called firefox.patch.js I searched for the update on your site and found nothing so I was hoping that maybe I could help you resolve the problem. There is a suggested manual removal method, however, I am not that trusting of the sources of self help. You are correct, there is nothing in the log, but the symptom continues... Check out .... https://support.mozilla.org/t5/Problems-with-add-ons-plugins-or/I-found-a-fake-Firefox-update/ta-p/37696 Thank you for your help. Jon Otto

Kevin. Reran ESET to remove Recursa. Also DelFix to remove what the scans created. I manually removed files it did not remove. Restarted Malwarebytes 3.0 and Avast. Still to detection of the original problem firefox.patch.js. If you have a clue as to that one, I would appreciate hearing about it. Neither Malwarebytes nor Avast detect it. Thank you for your time. Jon

Hi Kevin. We will remove Recurva. and clean up all the tools. I cannot tell you why that was downloaded!!! Thank you. We still have not captured the Firefox.patch.js malware. This machine runs Avast and Malwarebytes.... We will restart Malwarebytes, avast has already been restarted. If I need to run other tests, please let me know. I will touch base once all the cleanups are done,. Thank you. Jon Otto

Kevin The ESET scan found one threat in the download directory. The log is attached. I did NOT remove the application nor remove the threat. We look forward to the next step. Thank you, Jon Otto esetLog.txt

Kevin - I ran clean twice, installed version 3.0 scanned and installed FRST64. When using the alternate location Malwarebytes stopped me from getting to a site... So I used the location in the installer name link. Attached are the scan export, addition and frst.txt I look forward to the next steps. no mention of firefox.patch.js Jon Addition.txt FRST.txt scanexport.txt

HI we have scanned with our premium version and then Frist for the Firefox.patch.js false display. Attached are the logs I believe you will need. Addition.txt FRST.txt