FireFox Virus??

svo347 · 20-02-2005, 12:22 AM

Hey peoples, I seem to have a problem with FireFox & wondering if anyone else has also..
My antivirus program constantly picks up this virus whenever I use FireFox.
It says blocking virus "Exploit.Html.MhtRedir.Gen"
Any clues to what it is?
Its located in firefox profiles blah blah blah..
Thanx
Brett

lv619 · 20-02-2005, 12:40 AM

I assume this is it here:
http://www.viruslist.com/en/viruses/...?virusid=48656

Have you tried getting rid of it through spybot programs or anything?

svo347 · 20-02-2005, 12:49 AM

yes, but keeps returning.

XW 393 · 21-02-2005, 01:29 PM

Weird, I have no problems with Firefox, yet I hear all sorts of bad things ...........

Laminge · 21-02-2005, 01:49 PM

Nope no probs that i have seen.

Have you completly removed firefox and deleted all files?

TIKFD6 · 21-02-2005, 01:52 PM

No problems on this end either Brett.

The MaDDeSTMaN · 21-02-2005, 02:02 PM

No problems here either.

Sounds like there is something in your FireFox folder that your antivirus program doesn't like, but it could very well be harmless.

If you could tell us the exact file and where it is located (for example, C:\Program Files\Mozilla Firefox\defaults\profile\bookmarks.html), we might be able to shed some more light on what is going on.

MotherNatureVer2 · 21-02-2005, 03:09 PM

I have no problems at all either ....... I know I know jack about computers but wuld it be possible that this virus has just attached itself to firefox & isnt part of it .... if that makes any sence :P

M14A-Mclaren · 21-02-2005, 03:53 PM

I would say export your bookmarks, Delete your profile(Start>Run "firefox.exe -profilemanager") and make a new one, import your bookmarks again. You''ll have to reinstall any extensions you had as well

svo347 · 21-02-2005, 08:41 PM

Ok as it reads.....
c:\documents and settings\brett\applicationdata\mozilla\firefox\pro files\57gjnbiq.defaultuser\cache\90d74818d01
Infected with Exploit.Html.MhtRedir.Gen
Anybody??
Tried to uninstall firefox, restarted & re downloaded firefox to no avail.

RED_EL_XR8 · 21-02-2005, 08:48 PM

Quote:

Originally Posted by The MaDDeSTMaN

No problems here either.

Sounds like there is something in your FireFox folder that your antivirus program doesn't like, but it could very well be harmless.

If you could tell us the exact file and where it is located (for example, C:\Program Files\Mozilla Firefox\defaults\profile\bookmarks.html), we might be able to shed some more light on what is going on.

Your right on the money there. The file you virus scanner dislikes (but does not recognise or know how to fix) in in the cache. I dont think you'll find firefox is infected or your computer, your virus scanner is diabling but doesn't know how to kill it. Load all the updates to your virus scanner program and write down every error message, odds on you have something new which will be added to the definitions in a day or so.

Persistance!

Sprint_ED · 21-02-2005, 08:55 PM

try going to www.symantec.com anr download the Exploit.Html.MhtRedir.Gen removal tool, it will not only get rid of the virus but remove all other assiciated files from ur pc

Laminge · 21-02-2005, 09:03 PM

when you removed firefox did you delete the cache or any directories left over.

Unistall firefox, delete any files from c:\documents and settings\brett\applicationdata\mozilla onwards

svo347 · 21-02-2005, 09:04 PM

thanx pal.. Muchly appreciated!!!!!

Quasi · 21-02-2005, 09:23 PM

Quote:

Originally Posted by Laminge

Have you completly removed firefox and deleted all files?

Now there's a good idea

svo347 · 21-02-2005, 09:26 PM

Quote:

Originally Posted by Quasi

Now there's a good idea

Yes I thought so when i tried to get rid of it the FIRST Time...

svo347 · 21-02-2005, 11:08 PM

Ok got the b@$t@rd... Found i had to "Manually Delete" the file.
Whenever i went to uninstall the comp asked if i wanted to delete all relevant files but constantly missed one folder/file.
Thankyou for your help people.
Muchly Appreciated.
Now back to uninterupted surf'n..

svo347 · 21-02-2005, 11:54 PM

Scratch that... Its back bloody thing.
Look like ill be re formatting h/drive tomorrow.
Bugga.

RED_EL_XR8 · 22-02-2005, 10:01 AM

Quote:

Originally Posted by svo347

Scratch that... Its back bloody thing.
Look like ill be re formatting h/drive tomorrow.
Bugga.

You need to run something like hijack this or do some registry searches there will be another program or programs that are re-launching the code.

Formatting the Hard disk will fix it but you can get by without this. But odds on if you wont read this message before you have re-formatted. :Up_to_som

svo347 · 22-02-2005, 11:23 AM

Woohooo havent formatted yet..
Will try hijack
Thanx Red.

RED_EL_XR8 · 22-02-2005, 11:34 AM

Quote:

Originally Posted by svo347

Woohooo havent formatted yet..
Will try hijack
Thanx Red.

Thats "Hijackthis"

fordel · 23-02-2005, 01:39 AM

And i really hope that people who are not that familiar with comptuers will pay lots of attention and caution when using this, how many people really know what to keep and what to delete out of their registry

How many people really know what the registry is in the first place.....

Could be a bad issue for non technical users

Chris

Ghiadude · 23-02-2005, 04:34 AM

dude.a few points that i have noticed...
when manually deleting you must first turn off system restore otherwise itll come back every time.

next the exploit you originally mentioned is in explorer, not firefox.
hope this helps

M14A-Mclaren · 24-02-2005, 08:40 PM

Firefox 1.0.1 had been released, bounded to have some error fixes in there.

http://www.mozilla.org/products/firefox/