Results 1 to 6 of 6

Thread: Trojan In Firefox Source Normal?

  1. #1
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,478
    Thanks
    1,541
    Thanked
    1,029 times in 872 posts

    Trojan In Firefox Source Normal?

    I've just been unpacking Firefox's source code with 7-zip and Kaspersky informed me of several trojans throughout the process which it quarantined. It was the .tar.bz2 one from here ftp://ftp.mozilla.org/pub/mozilla.or.../3.5.2/source/ is this normal? I think the files, .xml IIRC, were under a folder called crashtests so they could have been example code or something...
    If it's normal that's fine, just wanted to be sure.

    A little more info - the detected files included the following:
    firefox-3.5.2-source.tar//mozilla-1.9.1/content/xslt/crashtests/485217.xml
    firefox-3.5.2-source.tar//mozilla-1.9.1/content/xslt/crashtests/485217.xsl

    Kaspersky lists the above as "Exploit.HTML.Agent.bw" but I didn't let the scan of the tar complete that time and I think I remember seeing trojan earlier.

    OK I checked through the logs and found the trojan: Detected: Trojan.JS.WindowBomb.o mozilla-1.9.1\tools\performance\startup\open10Windows.html
    Last edited by watercooled; 21-08-2009 at 12:18 AM.

  2. #2
    Comfortably Numb directhex's Avatar
    Join Date
    Jul 2003
    Location
    /dev/urandom
    Posts
    17,074
    Thanks
    228
    Thanked
    1,026 times in 677 posts
    • directhex's system
      • Motherboard:
      • Asus ROG Strix B550-I Gaming
      • CPU:
      • Ryzen 5900x
      • Memory:
      • 64GB G.Skill Trident Z RGB
      • Storage:
      • 2TB Seagate Firecuda 520
      • Graphics card(s):
      • EVGA GeForce RTX 3080 XC3 Ultra
      • PSU:
      • EVGA SuperNOVA 850W G3
      • Case:
      • NZXT H210i
      • Operating System:
      • Ubuntu 20.04, Windows 10
      • Monitor(s):
      • LG 34GN850
      • Internet:
      • FIOS

    Re: Trojan In Firefox Source Normal?

    Quote Originally Posted by watercooled View Post
    I've just been unpacking Firefox's source code with 7-zip and Kaspersky informed me of several trojans throughout the process which it quarantined. It was the .tar.bz2 one from here ftp://ftp.mozilla.org/pub/mozilla.or.../3.5.2/source/ is this normal? I think the files, .xml IIRC, were under a folder called crashtests so they could have been example code or something...
    If it's normal that's fine, just wanted to be sure.

    A little more info - the detected files included the following:
    firefox-3.5.2-source.tar//mozilla-1.9.1/content/xslt/crashtests/485217.xml
    firefox-3.5.2-source.tar//mozilla-1.9.1/content/xslt/crashtests/485217.xsl

    Kaspersky lists the above as "Exploit.HTML.Agent.bw" but I didn't let the scan of the tar complete that time and I think I remember seeing trojan earlier.

    OK I checked through the logs and found the trojan: Detected: Trojan.JS.WindowBomb.o mozilla-1.9.1\tools\performance\startup\open10Windows.html
    It detects a file which opens 10 windows (used for performance testing) as a javascript window-opening attack

    Which makes sense, but is also inappropriate in the context

  3. Received thanks from:

    watercooled (21-08-2009)

  4. #3
    Getting old...
    Join Date
    Aug 2007
    Location
    You Want To Ask That?
    Posts
    2,578
    Thanks
    188
    Thanked
    93 times in 89 posts
    • UseItNow's system
      • Motherboard:
      • It's holding everything together!
      • CPU:
      • It's in my PC
      • Memory:
      • It's remembering, alright?
      • Storage:
      • It's a hard drive, what more do you want?
      • Graphics card(s):
      • Cr*p, there I said it!
      • PSU:
      • It's old and juicy!
      • Case:
      • Bog standard!
      • Operating System:
      • You Got To Ask? I'm here at Hexus because of it!
      • Monitor(s):
      • Big Enough, Yay For Me!
      • Internet:
      • Hell if I know, care anymore?

    Re: Trojan In Firefox Source Normal?

    I think on an install of Firefox v1.5, when I scan the partition, Avira Free complains of finding something similar too. I've not quarantined it but that was because I thought it might be required by the program as it is in the program directory but who knows?

  5. Received thanks from:

    watercooled (21-08-2009)

  6. #4
    Gentoo Ricer
    Join Date
    Jan 2005
    Location
    Galway
    Posts
    11,048
    Thanks
    1,016
    Thanked
    944 times in 704 posts
    • aidanjt's system
      • Motherboard:
      • Asus Strix Z370-G
      • CPU:
      • Intel i7-8700K
      • Memory:
      • 2x8GB Corsiar LPX 3000C15
      • Storage:
      • 500GB Samsung 960 EVO
      • Graphics card(s):
      • EVGA GTX 970 SC ACX 2.0
      • PSU:
      • EVGA G3 750W
      • Case:
      • Fractal Design Define C Mini
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • Asus MG279Q
      • Internet:
      • 240mbps Virgin Cable

    Re: Trojan In Firefox Source Normal?

    They're unit tests as part of the Firefox build process. Smack your AV on the nose.
    Quote Originally Posted by Agent View Post
    ...every time Creative bring out a new card range their advertising makes it sound like they have discovered a way to insert a thousand Chuck Norris super dwarfs in your ears...

  7. Received thanks from:

    watercooled (21-08-2009)

  8. #5
    Comfortably Numb directhex's Avatar
    Join Date
    Jul 2003
    Location
    /dev/urandom
    Posts
    17,074
    Thanks
    228
    Thanked
    1,026 times in 677 posts
    • directhex's system
      • Motherboard:
      • Asus ROG Strix B550-I Gaming
      • CPU:
      • Ryzen 5900x
      • Memory:
      • 64GB G.Skill Trident Z RGB
      • Storage:
      • 2TB Seagate Firecuda 520
      • Graphics card(s):
      • EVGA GeForce RTX 3080 XC3 Ultra
      • PSU:
      • EVGA SuperNOVA 850W G3
      • Case:
      • NZXT H210i
      • Operating System:
      • Ubuntu 20.04, Windows 10
      • Monitor(s):
      • LG 34GN850
      • Internet:
      • FIOS

    Re: Trojan In Firefox Source Normal?

    Quote Originally Posted by aidanjt View Post
    They're unit tests as part of the Firefox build process. Smack your AV on the nose.

  9. #6
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,478
    Thanks
    1,541
    Thanked
    1,029 times in 872 posts

    Re: Trojan In Firefox Source Normal?

    Thanks. Will do

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 1
    Last Post: 15-03-2007, 08:42 AM
  2. Replies: 0
    Last Post: 15-03-2007, 12:09 AM
  3. Anti Firefox?
    By Allen in forum Software
    Replies: 34
    Last Post: 21-05-2005, 08:00 PM
  4. Top Download for today - FireFox users
    By DR in forum General Discussion
    Replies: 30
    Last Post: 19-05-2005, 08:41 PM
  5. Firefox extensions? And a few questions...
    By SilentDeath in forum Software
    Replies: 8
    Last Post: 08-03-2005, 10:01 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •