Virus - Firefox

[(kyT%0)]

clam found this in firefox :

[slickymaster]

Moved to a thread of its own.

Please don't hijack other people's threads. Not only it dilutes community effort but it's also the wrong way to get the proper and adequate help to your problem.

[(kyT%0)]

ok, thanks.

& in epiphany too :

ClamTk, v5.25
Mon Sep 9 07:06:34 2019
ClamAV Signatures: 6319963
Directories Scanned:

/home/ /.cache/epiphany/WebKitCache/Version 14/Blobs

/home/ /.cache/epiphany/WebKitCache/Version 14/Records/ED84CE6682CD2DAE7E83305F9E6D7F1992BA5399/Resource

Found 2 possible threats (2182 files scanned).

/home/ /.cache/epiphany/WebKitCache/Version 14/Records/ED84CE6682CD2DAE7E83305F9E6D7F1992BA5399/Resource/E143D5A8ED3DF29492370D8AC3051D5E6431A4D1-blob PUA.Win.Trojan.Xored-1

/home/ /.cache/epiphany/WebKitCache/Version 14/Blobs/505D6641D102295A21A56BEF59092A710B19D7C8
PUA.Win.Trojan.Xored-1

[sdsurfer]

I think if you google "PUA.Win.Trojan.Xored-1" you may find more info about this. PUA means "potentially unwanted application" and Win means its windows targeted.

[crip720]

I find that highlighting the exploits found and just doing a search on each of them will give you most of the information you need. If you don't understand something after, someone here can help you better.

[(kyT%0)]

already done that. am just curious how / where i got it from & that too on both my browsers. especially on epiphany on which i have zero add-ons & i barely use it.

it is a fresh beaver installed a week ago & up-to-date. i do not have a dual boot machine with windows. i do not have any .exe file. firewall always on & clamtk scans done twice a week.

i have not plugged in a single unknown flash drive. all apps have been installed via terminal.

[uRock]

It's in your Firefox cache, so it's something downloaded from a site you've visited.

[(kyT%0)]

yes you are spot on. it is from a browser re-direct from a specific website. only after i visit that site the trojan shows up in clam. am gonna keep the ad-blocker on when i visit that site henceforth.

[uRock]

yes you are spot on. it is from a browser re-direct from a specific website. only after i visit that site the trojan shows up in clam. am gonna keep the ad-blocker on when i visit that site henceforth.

You can report them. This may push Mozilla to send a message to the site's webmaster. https://www.trishtech.com/2017/08/ho...es-in-firefox/

[(kyT%0)]

You can report them. This may push Mozilla to send a message to the site's webmaster. https://www.trishtech.com/2017/08/ho...es-in-firefox/

done. thank you & thanks to all who replied to my queries.