[SOLVED] GAS Tecnologia... (was: Exploit on Firefox?)

[Victor2K]

A few minutes ago, I opened Firefox (mine is 36.0) and then appeared the warning about an attempt of exploiting the computer has been blocked by MBAE.

 

The thing is I didn't visited any website, just opened the Firefox and it appeared on that 'blank' page where they put tips and stuff.

 

Is there any conflict with MBAE and latest Firefox or it's an 'wild add-on' making the service?

[pbust]

Hi Victor,

 

please post your MBAE and FRST logs.

[README FIRST] How to post here

[Victor2K]

Here are the files you asked (MBAE logs are in a zip with a reduced form of my user name to make it better for you to check my case)

 

And I gave a small check to the files (the alert.txt) and noticed lots of instances of the Firefox Plugin Container in it. Might be the reason?

 

 

Malwarebytes Anti-Exploit-V2K.rar

FRST.txt

Addition.txt

[pbust]

FF Extension: GBBD Banco Santander (Brasil) S.A. - C:\Users\Usuario\AppData\Local\GAS Tecnologia\GBBD\abn\xpi [2015-01-26]
 -> https://forums.malwarebytes.org/index.php?/topic/135127-known-issues-conflicts/

 

Try disabling and/or running Firefox on a fresh profile. Do you still get the problem?

[Victor2K]

Disabled and no message appeared when I reloaded Firefox

[pbust]

Yes, I figured as much. That GAS Tecnologias software is bad news. Uninstall if you can.

 

Closing this thread as solved.