Its tries to do something with the registry to do with Mozilla Maintenance Service. I’m sorry I forgot but next time it blocks it again I’ll write down the details.
I just tried it again but it didn’t block it this time. So only sometimes it blocks it.
So I’m asking if this is a false positive or a real infection.
I know I’m probably going to be asked to reinstall Firefox but I didn’t want to touch anything before asking someone… Just in case I make the potential virus angry or something… I don’t know.
I’m running Windows 7 with Avast Free and Malwarebytes Free. Avast and Malwarebytes free don’t find anything in scans.
since this is located in a temp folder, you can clear your temp folder and it should be gone
http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/
Okay but only sometimes it blocks it, I’ve been trying to open it again but its not doing it now so I’m not sure how long it’ll take for me to post it… Sorry
Thanks, but what if it takes a couple of days for the message to come back?
Btw is there a way to see logs for the behavior shield for the events it has blocked? Because the last suspicious event still says nsExec.dll, is there a way for me to view the complete message it said before or not?
Also, in case if its of any help, I can still use firefox normally, whether avast blocks that file or not.
aw it showed an update message instead… I also just tried to open firefox and it didn’t block it again… Im sorry, I should’ve made this topic when I had all the details ready…
I just noticed you said that… That temp file cleaner thingy is safe and wont delete ANYTHING important?
What is the temporary folder anyway?? Will I lose saved passwords for browser?
[s]btw I just noticed in the start menu it 2 firefox shortcuts… one at the top and one at the bottom…
One was created I think when I first downloaded firefox and the other was created about a week ago… the top firefox icon is the one ive been using from what I remember but there is a possibility that the other icon was the one I clicked on when that file got blocked…
I’m going to try and click on the other firefox icon to see but…im a little bit scared if it opens or runs malware or something in case ive never clicked on it before or something… is there way I can tell before clicking on the other icon if its a fake firefox or a real one and just a shortcut before clicking on it…? btw sorry for being annoying…[/s]
^I don’t think thats got to do with avast blocking it anymore^
YEAH I GOT IT!! The avast message saying that it blocked nsExec.dll upon opening firefox!! I figured it out! Its after firefox updates!! It could be just a false alarm! BUT Its never happened to my other computers with avast free and firefox… But they are Windows Vista, this one is Windows 7… Hmm…
(btw im on a differant user now then when I first posted explaining the differant user name)
EDIT: sorry for double posting!! Forgot about my other one!)
EDIT:
Um I just tried updated my adobe reader and when I clicked on Details of the update it opened up internet explorer to some adobe update release notes website or whatever and avast popped up another blocked action.
I cant be bothered to get a pic so heres what it says:
Action Blocked
avast! Behavior Shield has blocked an action.
No further action is required.
I tried updated Firefox on a differant computer (Windows Vista 32-Bit, Malwarebytes Free, Avast Free)
And the same thing happened, except, the file looks differant. Also the shield settings on avast must be set to ask instead auto block and it looks like it might be displaying more information about it.
I attached a picture of it.
EDIT: SORRY I forgot AGAIN to edit my other post!!! D:
