This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Etsi tuesta

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Lue lisää

Ketju on arkistoitu. Esitä kysymys, jos tarvitset apua.

Security issue with .xul overlay that redirects google results to malicious websites

  • 3 vastausta
  • 2 henkilöllä on sama ongelma
  • 1 näyttö
  • Viimeisin kirjoittaja Morbus

AnonymousUser
AnonymousUser
more options

There's a security issue that needs fixing: it's quite easy to be infected by an .xul overlay that redirects google results to malicious websites. Closing Firefox and deleting the corresponding folders (order by date and select the one created when you noticed the problem for the first time) and it's fixed. Those folders are located in C:\Program Files\Mozilla Firefox\extensions

This happened

Every time Firefox opened

== Some .xul overlay got installed by something

There's a security issue that needs fixing: it's quite easy to be infected by an .xul overlay that redirects google results to malicious websites. Closing Firefox and deleting the corresponding folders (order by date and select the one created when you noticed the problem for the first time) and it's fixed. Those folders are located in C:\Program Files\Mozilla Firefox\extensions == This happened == Every time Firefox opened == Some .xul overlay got installed by something

Kaikki vastaukset (3)

Morbus
Morbus
more options

Hello J.F.

I believe this support article is what you need:

http://support.mozilla.com/en-US/kb/Searches+are+redirected+to+another+site

AnonymousUser
AnonymousUser Kysymyksen kysyjä
more options

Thanks, but manually deleting the extension folder that got installed solved the problem for me.

I was just trying to let the dev know about that security issue.

I had run several anti malware / virus scans but none detected this.

the-edmeister
the-edmeister
  • Moderator
more options

Firefox doesn't allow direct installation of extensions to the C:\Program Files\Mozilla Firefox\extensions\ folder and the only extension in that folder when Firefox is installed is part of the defaut theme. Another program on your PC must have installed an extension "globally" so it would be installed in all Profiles, by dropping the "extension" into that folder - which Firefox will install on the next startup.

Do you have any more information about what was installed? Inspecting the contents of the install.rdf file usually reveals information about the source of that extensions and the .xul overlay file you are calling malicious.

One suggestion is to "lock" that C:\Program Files\Mozilla Firefox\extensions \ folder so other programs being installed on your PC can't just "drop" files into that folder. It won't affect you being able to install extensions, because every extension I have ever seen has installed to the Profile - the user has to do a command line installation to make the extension "global" - for all users.