Author Topic: Exploit Detected on Firefox FP?  (Read 1475 times)

0 Members and 1 Guest are viewing this topic.

Offline kitmubet

  • Jr. Member
  • **
  • Posts: 22
Exploit Detected on Firefox FP?
« on: January 14, 2022, 05:47:44 PM »
While i was browsing suddenly an Exploit Detected popup (sadly i wasnt able to do a screenshot, and cant find any thing in notification or shield logs)
I pressed scan my pc button then avast trayIcon disappeared,
oppening avast doesnt work the trayicon will just appear for a few second then disappear again,
i did some scan no detection (malwarbytes, emisoft emergency kit, tdsskiller),

after a restart everything is okay 
i also tried going back to the firefox session and nothing is detected (if curious i was browsing gimp and libgdx )


avast free version 21.11.2500 (build 21.11.6809.528)
virus def 220114-2
firefox version 96.0

Attached
Farbar Logs



Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37180
Re: Exploit Detected on Firefox FP?
« Reply #1 on: January 14, 2022, 10:05:28 PM »
Quote
Attached
Farbar Logs
That wont help, those malware experts that could read those logs dont frequent the forum anymore

Try Malwarebytes forum


Offline kitmubet

  • Jr. Member
  • **
  • Posts: 22
Re: Exploit Detected on Firefox FP?
« Reply #2 on: January 15, 2022, 08:31:34 AM »
Quote
Attached
Farbar Logs
That wont help, those malware experts that could read those logs dont frequent the forum anymore

Try Malwarebytes forum

ok Any other logs or things i can do ??

just to clarify that its avast that detected it

so far everything seems ok no detection,
haven't noticed anything suspicious  ( also updated to latest stable firefox)

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33624
  • malware fighter
Re: Exploit Detected on Firefox FP?
« Reply #3 on: January 15, 2022, 01:54:22 PM »
You could follow the instructions here, and/or install a good pop-up blocker.

https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware
MB-forum & geekstogo is your next stop of call.

Like Pondus says, it is a pity almost all qualified malware removers have left here at forum.avast.com.

For cold recon 3rd party website security analysis and website error-hunter I am one of the last Mohikans.

Thanks to avast offering me a platform here.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline kitmubet

  • Jr. Member
  • **
  • Posts: 22
Re: Exploit Detected on Firefox FP?
« Reply #4 on: January 16, 2022, 03:53:30 PM »
i have recently started a thread in mbam

here is the link hxxps://forums.malwarebytes.com/topic/282796-avast-exploit-detected-on-firefox/

edit:
just after posting this reply i saw there already a reply and some instruction on the thread in mbam
« Last Edit: January 16, 2022, 03:55:46 PM by kitmubet »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33624
  • malware fighter
Re: Exploit Detected on Firefox FP?
« Reply #5 on: January 16, 2022, 04:37:34 PM »
Hi kitmubet,

Thanks for the feed-back and for reporting back on this. This may help other folks that are being confronted to similar issues. Very responsible behaviour of you to post this heads-up. That is the right attitude.  ;)

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline kitmubet

  • Jr. Member
  • **
  • Posts: 22
Re: Exploit Detected on Firefox FP?
« Reply #6 on: January 18, 2022, 09:47:49 AM »
just to update

nothing else was found, so whatever it was avast have already remove/block it  :)

Offline kitmubet

  • Jr. Member
  • **
  • Posts: 22
Re: Exploit Detected on Firefox FP?
« Reply #7 on: January 21, 2022, 08:53:53 AM »
this happened again after updating firefox and while updating extensions (i have screenshot this time  :) )
not sure if to create a new thread or continue this

it seems avast crash if you click Scan My PC ,
its possible its an FP from the extension
(firefox extension Avast Online Security, Mbam browserGuard, Ghostery,,Comodo Online security,,Bitdefender Trafficlight,)

Exploit Detection
Win32:Induc-W
firefox[13016]


Edit
remove Video speed controller from list of firefox extension (it wasn't in firefox its on googlechrome i was using google chrome when writing this post)
(posting here first before going to mbam forums)



Attached
ScreenShot
Farbar logs also but i know there no one here can use this


« Last Edit: January 21, 2022, 11:45:37 AM by kitmubet »

Offline magna86

  • Anti Malware Fighter
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4239
    • Ambulanta MyCity Forum - ASAP Member
Re: Exploit Detected on Firefox FP?
« Reply #8 on: January 23, 2022, 11:25:53 AM »
Hello, I've looked at your latest posted logs. The issue here isn't malware-related per see, rather AV flags the browser part as FP.

What you should do (if the issue is not fixed) is to reset all your browsers back to their default settings. You can use google for info on how to.

The next step would be to remove unnecessary browser extensions (as you have the number) and leave only the useful to you as one extension probably triggers the AV.

Then the issue should be fixed.

 ;)

« Last Edit: January 23, 2022, 11:29:16 AM by magna86 »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76125
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Exploit Detected on Firefox FP?
« Reply #9 on: January 23, 2022, 11:35:29 AM »
What you should do (if the issue is not fixed) is to reset all your browsers back to their default settings. You can use google for info on how to.
Instructions: https://support.avast.com/en-ww/article/Reset-browser
W8.1 [x64] - Avast PremSec 22.6.7351.BC [UI.712] - Firefox ESR 91.10 [NS/uBO/PB] - Thunderbird 91.10
Avast-Tools: Secure Browser 102.1 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0