Weybridge Computer Services

WCS.Tony

Removing XULRunner 1.9.1 from Firefox

Removing XULRunner 1.9.1 from Firefox
WCS.Tony - Tue May 01, 2012 @ 04:14AM
Comments: 1

Well I’m using good old FireFox again on my trusty old XP computer.

I still use that computer more than my new quad core / Win7 beast, as everything I want is there. It has evolved with me over the years and I have installed utilities and tweaked it like mad. The only time I find myself drawn to the Quad is when I need to do something that actually requires the huge processing power or memory.

I really must put my old XP system away and start using my new one.


Disabled FireFox AddOns

After ignoring these two entries in my FireFox add-ons for ages,
I decided to try and get rid of them.

Google Gears 0.5.36.0                        XULRunner 1.9.1

 

Removing Google Gears

Fairly simple just uninstall it, I used CCleaner
but you can use Windows Add or Remove Programs.

Click on Run Uninstaller.                                   


Removing XULRunner 1.9.1

This proved a slightly more difficult task, searching the web came up with loads of similar hits.
http://support.mozilla.org/en-US/questions/808836
- confused?
https://bugzilla.mozilla.org/show_bug.cgi?id=577826
says it’s malware but no help?

But is it malware or not and regardless of that HOW do I get rid of it?

FireFox says it’s a Mozilla runtime package and Mozilla mentions XULRunner 1.9.1.
I do not install things from untrusted sources, and I’m usually careful to check my downloads and installations. How did this sneak through?
Checked Application Data and Local Settings (all the directory) with MalwareBytes – NOTHING?

At last something that looks hopeful
https://developer.mozilla.org/en/XULRunner_1.9.1_Release_Notes

So it is not malware?
But attempting to run the commands failed.

C:\Documents and Settings\Tony.TONY-SR1619>xulrunner.exe --unregister-global
'xulrunner.exe' is not recognized as an internal or external command,
operable program or batch file.

C:\Documents and Settings\Tony.TONY-SR1619>

Searched my hard disk - no XULR anything, let alone executable files?
So back to how the **** do I remove this addon? Or whatever it is.
After more searching on the web I finally gave up and decided to report it to Mozilla.

I have Add-on Compatibility Reporter 1.1 installed
https://addons.mozilla.org/en-US/firefox/addon/add-on-compatibility-reporter/?src=api

So I sent a report – click on the COMPATABILITY box and select  NO. This created a report
Right clicking on the XULRunner entry again.
I selected Show Compatibility Reports, and this page popped up.

https://addons.mozilla.org/en-US/firefox/compatibility/reporter/%7BF3F0B3BA-D86A-4478-961D-3B24C2D0EAF1%7D?works_properly=0

I’m the ONLY one to have any problems with this?
Looking at the report {F3F0B3BA-D86A-4478-961D-3B24C2D0EAF1} Compatibility Reports

Hold on is that a folder name?
Let’s open that folder?

I then closed FF and renamed the folder to WCS{F3… and reopen FF – NO XULRunner.
C:\Documents and Settings\Tony.TONY-SR1619\Local Settings\Application Data\{F3F0B3BA-D86A-4478-961D-3B24C2D0EAF1}
C:\Documents and Settings\Tony.TONY-SR1619\Local Settings\Application Data\WCS{F3F0B3BA-D86A-4478-961D-3B24C2D0EAF1}

I ran MalwareBytes on the folder and it came back clean on this folder / directory.

ZIP it up and sent to VirusTotal
4/42 - JS/Redirector.ab (x2) Trojan:JS/Hiloti.F or Troj/FFAdRedr-A
https://www.virustotal.com/file/243f7c6805339e516ae390b24219c2bb59e59c0f8dcc9f3d300206bbeccd591e/analysis/1335859120/

So it did have some Malware.

After a reboot (just in case) still no XULRunner.

Firefox now seems to close far faster than before, first noticed after removing Google Gears.

 

See XLURunner.PDF for a PDF of this document.

 

 

 

Comments: 1

Comments

1. Anonymous   |   Mon Jan 09, 2017 @ 02:47AM

Removal of the difficulties in life has been the ultimate goal and objective for the livs of theindividuals and all humans. The prospects of the visits of http://www.rushmypapers.me/ are implemented and organized to fulfill the demand of the students and candidates for this purpose and objective for academic circles.

Post a Comment




powered by Doodlekit™ Free Website Builder