Jump to content

AMozilla AFirefox in AppData


Go to solution Solved by Maurice Naggar,

Recommended Posts

Everytime I start Windows, an old Firefox icon appears in the taskbar with random letters in its name. Sometimes it causes real Firefox window to be closed or taskbar to disappear and Icannot go back without restarting the computer

I also found folders named AMozilla and AMozilla/AFirefox in AppData/Roaming folder.

 

I see that you've fixed this before here. But I cannot reach the fixlist file. Thanks for any help you can provide.

 

My FRST and Addition files are attached.

FRST.txt Addition.txt

Link to post
Share on other sites

Hello @Freefall3207 :welcome: I will be guiding you. Just please do not even 'consider' the use of anyone else's 'fixlist' from anywhere. Most all 'fixlist' scripts are customized for a specific set of conditions on "a" specific mahine.   Not for you. But here is where you should begin. Please  set File Explorer to SHOW ALL folders, all files, including Hidden ones.  Use OPTION ONE or TWO of this article
Please use this Guide

Next, a scan with a trusted antivirus tool from Microsoft. This is a one time run. This Microsoft tool is a on-demand standalone tool.The Microsoft Safety Scanner is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system. 

The download links & the how-to-run-the tool are at this link at Microsoft 

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Look on Scan Options & select  FULL scan  .

Then start the scan. Have lots of patience. Once you start the scan & you see it started, then leave it be.  

  • Once you see it has started, take a long long break;  walk away.  Do not pay credence if you see some intermediate early flash messages on screen display.  The only things that count are the End result at the end of the run.
  • Again, any on-screen display about repeat 'infection' is not to be relied on.  Ignore those.
  • We only rely on the end result that is on the log-report-file.

 

This is likely to run for many hours   ( depending on number of files on your machine & the speed of hardware.)

The log is named MSERT.log  

the log will be at  

Windows\debug\msert.log

Please attach that log with your reply. We will do more later.

Link to post
Share on other sites

Hello @Maurice Naggar, sorry for late reply.The tool ran for many hours, but it seems it finished its scan last night while I was asleep.

I've attached the log below, but it shows nothing, although it was showing more than 50 infections before I go to sleep. Could it be that computer somehow restarted at night? ( I paused Windows Update until next week but I don't know. Task manager says computer is up for 27 hours)

 

Is this something you can help me with?

photo_2022-09-17_22-17-32.jpg

msert.log

Link to post
Share on other sites

I regret that the "on screen" display has apparently caused you some concern. Be assured that the Safety Scanner 'really' has reported "NO" infection.

By the way, about what you "saw" on intermediate displays of the Microsoft Safety Scanner,  I would like you to review the remarks by AndyDavid about all that on this Microsoft community venue https://docs.microsoft.com/en-us/answers/questions/326108/mar-1721-msert-detects-items-during-scan-but-at-en.html

Also, the post by EricYin of Microsoft  ( just below that section)

Quote

 if nothing reported in %SYSTEMROOT%\debug\msert.log, that means no infections

.

It's only the final report that matters.  For the gory details, see  https://answers.microsoft.com/en-us/protect/forum/protect_scanner-protect_scanning-windows_10/what-is-wrong-with-the-microsoft-safety-scanner/27c95df9-7d49-4d02-b734-bcb16495cfc3?messageId=e199de56-9a50-4cc5-a37a-3a7f2708b093

See also https://support.microsoft.com/en-us/topic/how-to-troubleshoot-an-error-when-you-run-the-microsoft-safety-scanner-6cd5faa1-f7b4-afd2-85c7-9bed02860f1c

Microsoft Safety Scanner v1.375, (build 1.375.478.0)
Started On Sat Sep 17 10:29:14 2022

Engine: 1.1.19700.1
Signatures: 1.375.478.0
MpGear: 1.1.16330.1
Run Mode: Interactive Graphical Mode

Results Summary:
----------------
No infection found.    👍  😃
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Safety Scanner Finished On Sun Sep 18 07:46:21 2022

Please un-do any 'pause' you made on Windows Update.  You may certainly do a Windows Restart.

Link to post
Share on other sites

Alright. We need to do more scanning. This here you can start & once it is under way, you can leave the machine alone & let it run over-night ( IF necessary). No need to keep watch once it starts the actual scan run. 

Next, This will be a check with ESET Onlinescanner for viruses, other malware, adwares, & potentially unwanted applications.

Go to https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe

 

It will start a download of "esetonlinescanner.exe"

  • Save the file to your system, such as the Downloads folder, or else to the Desktop.
  • Go to the saved file, and double click it to get it started.

 

  • When presented with the initial ESET options, click on "Computer Scan".
  • Next, when prompted by Windows, allow it to start by clicking Yes
  • When prompted for scan type, Click on Full scan

Look at & tick ( select ) the radio selection "Enable ESET to detect and quarantine potentially unwanted applications" and click on Start scan button.

  • Have patience. The entire process may take an hour or more. There is an initial update download.

There is a progress window display. You may step away from machine &. Let it be.  That is, once it is under way, you should leave it running.  It will run for several hours.

  • At screen "Detections occured and resolved" click on blue button "View detected results"
  • On next screen, at lower left, click on blue "Save scan log"
  • View where file is to be saved. Provide a meaningful name for the "File name:"
  • On last screen, set to Off (left) the option for Periodic scanning
  • Click "save and continue"
  • Please attach the report file so I can review
Link to post
Share on other sites

@Freefall3207
When you are finished & when you have some quiet time, do this for FIREFOX.

Open Firefox's  Add-ons page using either of 2 ways:

  • "3-bar" menu button (or Tools menu) > Add-ons
  • in the Windows "Run" dialog, type or paste
firefox.exe "about:addons"


 
 

In the left column, click Extensions. Review all browser extensions on Firefox. Then, if in doubt, disable (or Remove, if possible) unrecognized and unwanted extensions. All extensions are optional; the troublemaker might not be obvious from its name.

( with credit to jscher2000 on Mozilla support at support.mozilla.org )

Link to post
Share on other sites

This job will run exclusively and also at the end, it will do a Windows Restart ( reboot).

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this. THIS run will do a Windows RESTART. Once it starts it will auto-close any other running app.

We will use FRST64.exe  on the Downloads folder to run a custom script.    The system will be rebooted after the script has run.

This custom script is for  Freefall3207  only / for this machine only.

  • Please save the (attached file named) FIXLIST.txt   to the   Downloads   folder

Fixlist.txt        <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Downloads    folder.


RIGHT click on FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.

  •    If the tool warns you the version is outdated, please download and run the updated version.
  • IF Windows prompts you about running this, select YES to allow it to proceed.
  • IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

  • on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 

Please attach the FIXLOG.txt with your next reply later, at your next opportunity. Be sure to let me know, How is the system at that point.

Link to post
Share on other sites

Just put your words on the white-box of the Reply section and press the button marked "Submit Reply". If what you are seeing is a little blurb about IPS & spam block protection .....just ignore.  After all your 2 posts above were successful postings. That is also to say to ignore the blurb that 'may' display as "IPS spam blocked by CleanTalk". Push the Submit Reply button anyhow.

Link to post
Share on other sites

  • I would recommend getting a readout report as to update status of some key apps.
  • Download SecurityCheck by glax24 from here  https://tools.safezone.cc/glax24/SecurityCheck/SecurityCheck.exe
  • and save the tool on the desktop.
  • If Windows's  SmartScreen block that with a message-window, then
  • Click on the MORE INFO spot and over-ride that and allow it to proceed.

                               This tool is safe.   Smartscreen is overly sensitive.

Right-click  with your mouse on the Securitycheck.exe  and select "Run as administrator"   and reply YES to allow to run & go forward
Wait for the scan to finish. It will open in a text file named SecurityType.txt. Close the file.  Attach it with your next reply.
You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt

  • Have reviewed the Fixlog report (for the last custom Fixlist run). The run looks good. The system SFC check is good. The Microsoft Defender antivirus protection is up-to-date & in fine state. This procedure has freed up some 234 GB of disc space by cleaning up temporary files. That is an awesome amount.

 I expect that this system will be seen to be running faster than before.
 

Link to post
Share on other sites

Hello. Thanks. Per the SecurityCheck, here are apps that need your action for follow-up.
NVIDIA GeForce Experience 3.25.1.27 v.3.25.1.27  Warning! Download Update\

7-Zip 21.07 (x64) v.21.07  Warning! Download Update
Uninstall old version and install new one.

Discord v.1.0.9004  Warning! Download Update

Slack v.4.28.182  Warning! Download Update

Zoom v.5.11.1 (6602)  Warning! Download Update

Telegram Desktop version 4.2 v.4.2  Warning! Download Update

Spotify v.1.1.94.872.g7a9200fe  Warning! Download Update 

Google Chrome v.105.0.5195.127  Warning! Download Update

Bonjour v.2.0.2.0 Warning! Application is distributed through the partnership programs and bundle assemblies. You do not need it. Uninstall Bonjour

Let me know if you need something else. Let me know if you are ready to wrap-up this case.

Link to post
Share on other sites

Hi. A) You should do a Windows RESTART.
B) How do you launch Firefox browser? This time try launching it from the Windows Start menu.
C ) If situation is just about a "icon" that happens to be on the Taskbar ....that taskbar-link can be removed & later ....a proper one added. ( assuming that you have a shortcut-link on the Taskbar for Firefox.)

Link to post
Share on other sites

I would like a report set for review.   This is a report only.

Please download MALWAREBYTES MBST Support Tool

Once you start it click Advanced >>> then   Gather Logs

 Have patience till the run has finished.

Upload an archive once it is done. Attach the mbst-grab-results.zip from the Desktop with your next Reply

Link to post
Share on other sites

  • Solution

Hello. Here is next step. 

This job will run exclusively and also at the end, it will do a Windows Restart ( reboot).

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this. Once it starts it will auto-close any other running app.

We will use FRST64.exe  on the Downloads folder to run a custom script.    The system will be rebooted after the script has run.

This custom script is for  Freefall3207  only / for this machine only.

  • Please save the (attached file named) FIXLIST.txt   to the   Downloads   folder

Fixlist.txt      <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Downloads    folder.


RIGHT click on FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.

  •    If the tool warns you the version is outdated, please download and run the updated version.
  • IF Windows prompts you about running this, select YES to allow it to proceed.
  • IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

  • on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 

Please attach the FIXLOG.txt with your next reply later, at your next opportunity. Be sure to let me know, How is the system at that point.

Edited by Maurice Naggar
Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.