Infection or something else?

[Crimsoncricket]

I downloaded and ran the latest version of JRT (8.1.3.0) today and found the following listed among the usual assortment of deleted temp files:

Successfully deleted: C:\Users\CrimsonCricket\AppData\Roaming\Mozilla\Firefox\Profiles\oclu93b1.default\extensions\trash (Folder)

Is this some sort of infection?  It did not reappear when I rebooted and ran another JRT scan. 

[thisisu]

Hi Crimsoncricket,

No it's not an infection. Think this is simply Mozilla's trash folder

[Crimsoncricket]

1 hour ago, thisisu said:

Hi Crimsoncricket,

No it's not an infection. Think this is simply Mozilla's trash folder

Thanks for clarifying that for me.  I was confused since JRT has never emptied that folder in any other scans I have done.

[nukecad]

Interestingly JRT has started picking up this Firefox 'trash' folder on my weekly scan in the last few weeks. (Different user/profile name of course).

It never used to pick it up before.

 

I suspect one of 2 extensions that I added to Firefox recently - either 'AdBlock' or 'I don't care about cookies'.

(Although I don't see any reason why either would need a trash folder).

I installed both of these on the same day, and it seems only since then that JRT has been finding and removing this trash folder.

 

I'll try and remember to keep an eye on it and see if I can spot when it's getting recreated and if there's anything in there before I next run JRT.

 

Edited September 26, 2017 by nukecad

[nukecad]

I've been keeping an eye on this location and no 'trash' folder was created until I got an update from v55 to v66.

It only contains one file:
jid1-KKzOGWgsW3Ao4Q@jetpack.xpi

Created on 20/09/2017.

It seems to be a zip file associated with the installation of the extension 'I dont care about cookies' - which ties in with what I noted above.

I'm guessing that it updated itself during the FFx upgrade and the old version got put in the trash folder rather than being deleted.