Malicious deletion of files from Firefox

Discussion in 'Malware Help (A Specialist Will Reply)' started by CrispyNoodle, Jul 12, 2008.

  1. CrispyNoodle

    CrispyNoodle Private E-2

    About 10 days ago three things happened almost simultaneously:
    1. I got a message that a new version of FF was available for downloading: Firefox3.
    2. I was infected with a Trojan that my spyware detected and quarantined: CHM.Psyme.
    3. When I went to use my browser Firefox2.0.0.15 the message appeared that it couldn't be loaded because the file js3250.dll was missing.

    So using IE instead I downloaded Firefox3. The final panel of the install wizard has a box for 'launch FF now' which I left ticked. The launch did not happen and I got the same message as before - no js3250.dll.

    I discovered from the mozillaZine site that there is malware that deletes
    js3250.dll whenever certain actions are performed: opening a desktop shortcut or IE, or accessing the Control Panel, My Computer, or Windows Explorer.

    Using Windows Explorer I found ....\Mozilla Firefox\install.log and discovered that certain files it claimed to have installed were absent:
    js3250.dll
    freebl3.chk
    freebl3.dll
    nss3.dll
    plc4.dll
    plds4.dll
    smime3.dll
    softokn3.chk
    softokn3.dll
    ssl3.dll
    xpcom.dll
    LICENCE
    README.txt
    and that there was
    ** ERROR Registering: C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll **
    My Spyware Doctor with Antivirus gives the PC a clean bill of health, as does Windows Defender.

    Yesterday and today I went through READ & RUN ME FIRST and carried out steps 1, 2 and 3 of the Vista Cleaning Procedure. The only malware explicitly identified and removed was found by Spybot: ErrorSmart. I don't know what may be lurking in the various .log files.

    I tried to install Firefox3 again but with no success: the same files appear in the install.log but are not present. I attach three of the requested log files but cannot locate a Malwarebytes Anti-Malware log.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!


    You are not having malware problems and should continue to seek help in the thread you posted in the Software Forum. Perhaps you issue is just due to using Threatfire, Windows Defender, Spyware Doctor, PC Tools Firewall and running into conflicts during your installation of software. Try shutting all of the down and see if you can install FireFox properly. You may be blocking the installation of the js3250.dll file.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds