firefox update blocked by AVG?
AVG popped up with "threat detected" C:\PROGRAM FILES (x86)MOZILLA FIREFOX\UPDATED\FIREFOX.EXE Firefox had automatically updated to 45.0.2 2 or 3 hours before...Was this a threat or was firefox trying to update again?? AVG "removed the threat" AVG report said: Identity Protection Results "Threat Name";"Status";"Detection Time";"Object Type";"Process" "General behavioral detection, C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UPDATED\FIREFOX.EXE";"Secured";"4/12/2016, 12:22:34 PM";"File or Directory";""
Chosen solution
pharmerbill said
AVG popped up with "threat detected" C:\PROGRAM FILES (x86)MOZILLA FIREFOX\UPDATED\FIREFOX.EXE Firefox had automatically updated to 45.0.2 2 or 3 hours before...Was this a threat or was firefox trying to update again?? AVG "removed the threat" AVG report said: Identity Protection Results "Threat Name";"Status";"Detection Time";"Object Type";"Process" "General behavioral detection, C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UPDATED\FIREFOX.EXE";"Secured";"4/12/2016, 12:22:34 PM";"File or Directory";""
This was fixed by the update..thanks anyway
Read this answer in context 👍 1All Replies (11)
hi, if it is a genuine firefox update (and it looks like it based on the folder path), this is likely a false positive detection - please check up with avast because most av vendors have a streamlined way to flag such false positives...
AVG just remotely checked my computer...said I have no virus and to check with FIREFOX for the "location" of what's being flagged as possible identity theft. Are these files from you guys? They said that an update in a couple of days to avg "Identity theft" should fix the issue..
C:\PROGRAM FILES (x86)MOZILLA FIREFOX\UPDATED\FIREFOX.EXE
Looks like Malware to me!
First, Firefox updates are 'packaged' in a .mar file, not an .exe file.
Second, Mozilla wouldn't have created that \UPDATED\ folder in that location - period. Update .mar files would have gone to the /AppData/Local/Mozilla/updates/ and a few folder levels deeper - note the "s" and the folder name being lower-case not all caps.
You can try these free programs to scan for malware, which work with your existing antivirus software:
- Microsoft Safety Scanner
- MalwareBytes' Anti-Malware
- Anti-Rootkit Utility - TDSSKiller
- AdwCleaner (for more info, see this alternate AdwCleaner download page)
- Hitman Pro
- ESET Online Scanner
Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one. Windows 8 has antivirus built-in already.
Further information can be found in the Troubleshoot Firefox issues caused by malware article.
Did this fix your problems? Please report back to us!
Firefox creates the updated folder after an update has been downloaded and prepared for applying on the next start and copy the new version from the updated folder to the main Firefox program folder. That is at least how it works on Linux and Mac and I would assume that it is not different on Windows.
The updates\0 folder stores the downloaded .mar file. So it looks that your security software doesn't like the newly downloaded Firefox update.
You can contact AVG for support and make sure you have the latest updates.
Modified
To the-edmeister: I did microsoft safety scanner spybot, malewarebytes and eset like you suggested...during the download process of eset the Threat Detection popped up and I have attached a screen shot..I chose "secure the threat" just in case and the eset still ran no problem...AVG remote guy ran "special tools" and none of these found a threat..did root kit scan with AVG and complete scan of computer
Sorry, that \UPDATED\ folder must be a new feature for Firefox updates, one that I haven't seen before and didn't see with the Firefox 45 update. And that might be because I do manual updates when "I feel the need", a few days after a new version is released.
Maybe as cor-el mentioned - it might be AVG needs to be updated to recognize that \UPDATED\ folder in preparation for installing the Firefox update. I haven't used AVG for at least 5 years now - currently using COMODO Antivirus. I found that AVG was always a few days 'behind the curve' in updating their product with Firefox releases and didn't handle the pre-release versions properly, IMO - so I switched to Avira in 2011.
This is likely a valid update to the latest Firefox release.
Note that this screenshot also shows that the latest Shockwave Flash player version is blocked and that version is a security update that you should apply.
- https://helpx.adobe.com/security/products/flash-player/apsb16-10.html
- https://support.mozilla.org/forums/plug-check-page-discussions/711944
It looks that AVG is not up to date with recognizing the latest versions of software and blocks them all.
Try this:
- Download the Firefox installer and save the file to the desktop
*https://www.mozilla.org/en-US/firefox/all/ - Start the installation with a double-click on the desktop icon
It is possible that security software (anti-virus, firewall) is causing the problem. Try to disable security software temporarily to see if that makes a difference in case there is a problem with installing Firefox.
cor-el said
Firefox creates the updated folder after an update has been downloaded and prepared for applying on the next start and copy the new version from the updated folder to the main Firefox program folder. That is at least how it works on Linux and Mac and I would assume that it is not different on Windows. The updates\0 folder stores the downloaded .mar file. So it looks that your security software doesn't like the newly downloaded Firefox update. You can contact AVG for support and make sure you have the latest updates.
I have AVG set to autoupdate and I'm pretty sure it's the newest version. I have been using the newest version, but when i hit update it downloaded something...I hope it's the fix for this..
I had the Identity Threat Detection pop up while downloading Eset virus detection (I put a screen shot of what it flagged)
cor-el said
This is likely a valid update to the latest Firefox release. Note that this screenshot also shows that the latest Shockwave Flash player version is blocked and that version is a security update that you should apply.It looks that AVG is not up to date with recognizing the latest versions of software and blocks them all. Try this:
- https://helpx.adobe.com/security/products/flash-player/apsb16-10.html
- https://support.mozilla.org/forums/plug-check-page-discussions/711944
It is possible that security software (anti-virus, firewall) is causing the problem. Try to disable security software temporarily to see if that makes a difference in case there is a problem with installing Firefox.
- Download the Firefox installer and save the file to the desktop
*https://www.mozilla.org/en-US/firefox/all/- Start the installation with a double-click on the desktop icon
I have the most recent versions of AVG and Firefox and Even tho Identity Theft says it is blocking stuff, the stuff still downloads and works (eset for example)..I always choose the let us fix this option and then AVG says they're blocked. Should I reinstall firefox...or wait til AVG updates it's Identity Theft Protection feature...A remote tech that looked at my computer said that this is a "known issue" but I don't see other people having the same problem as me...in neither Mozilla support nor AVG support forums
You will have to contact AVG and ask them to look in to this or ask advice how to deal with such issues. As long as you have installed and enabled AVG software or only the involved component it is likely that you will keep running into such issues.
Chosen Solution
pharmerbill said
AVG popped up with "threat detected" C:\PROGRAM FILES (x86)MOZILLA FIREFOX\UPDATED\FIREFOX.EXE Firefox had automatically updated to 45.0.2 2 or 3 hours before...Was this a threat or was firefox trying to update again?? AVG "removed the threat" AVG report said: Identity Protection Results "Threat Name";"Status";"Detection Time";"Object Type";"Process" "General behavioral detection, C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UPDATED\FIREFOX.EXE";"Secured";"4/12/2016, 12:22:34 PM";"File or Directory";""
This was fixed by the update..thanks anyway