False Positive (Firefox add-on)

Anyone ?

Hello,

Sorry for the delay.

I do not reproduce this detections, is it possible to share the file "C:\Users\xxxxx\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\xxxxxxxx.default\prefs.js" ? You can zip it and sent it by email if you prefer.

Thanks,

Hi, you need to browse for some time and amountinjected number is changing. It was 229 and now is 231.

I guess it is counting how many times it used local content.

Thanks.

Can you share the whole AdwCleaner logfile ?

Thanks,

# AdwCleaner v6.020 - Logfile created 30/09/2016 at 15:03:49
# Updated on 14/09/2016 by ToolsLib
# Database : 2016-09-28.1 [Server]
# Operating System : Windows 7 Ultimate Service Pack 1 (X86)
# Running from : C:\Users\xxxxx\Desktop\Programs and Stuff\AdwCleaner\adwcleaner_6.020.exe
# Mode: Scan
# Support : https://toolslib.net/forum


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious keys found.

***** [ Shortcuts ] *****

No infected shortcut found.

***** [ Scheduled Tasks ] *****

No malicious task found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Web browsers ] *****

Firefox pref Found:  [C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\wy5zoqnb.default\prefs.js] - "extensions.jid1-BoFifL9Vbdl2zQ@jetpack.amountInjected" -  164
Firefox pref Found:  [C:\Users\xxxxx\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\kx3lwgiq.default-1434620132759\prefs.js] - "extensions.jid1-BoFifL9Vbdl2zQ@jetpack.amountInjected" -  38333
Firefox pref Found:  [C:\Users\xxxxx\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\b1peq8ln.default\prefs.js] - "extensions.jid1-BoFifL9Vbdl2zQ@jetpack.amountInjected" -  229

No malicious Chromium based browser items found.

*************************

C:\AdwCleaner\AdwCleaner[S3].txt - [1671 Bytes] - [30/09/2016 15:03:49]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1744 Bytes] ##########

Hi, I've just noticed that in options there is a counter for locally injected resources and I don't think it can be disabled.

This is from Pale Moon :

http://imgur.com/a/ODSwk

https://github.com/Synzvato/decentraleyes/issues/107

So, is this FP or not ?

Counter for locally injected resources is a legitimate part of Decentraleyes.

Hello,

Sorry for the delay.

You can ignore those detection at the moment, I'm still working on them.

Sorry for the inconvenience,

Any news ?

Sorry for the delay, still working on it.

This is a new FP (Internet Explorer) :

Value Found:  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext [DisableAddonLoadTimePerformanceNotifications]

Greetings, 

This is a new FP (Internet Explorer) :

Value Found:  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext [DisableAddonLoadTimePerformanceNotifications]

---

Psajko, 2016-10-27 13:22:49 (UTC)

Sorry for the late answer. It should be fixed in a few minutes.

Regards.