I use Debian and because of that the version in the reps is outdated, so I have Firefox Quantum that is fully unpacked in a folder where my non-root user has all permissions to read, write and execute.

I suspect that my browser (or profile) could have been infected with malware, but I have no idea how to do it, how to check specifically the browser.

  • 2
    This doesn’t answer your question, but Debian tracks Firefox ESR, and always has the latest release which is fully-supported by Mozilla. – Stephen Kitt Jun 17 '20 at 15:49
  • What is it that makes think your browser has been compromised? – Eduardo Trápani Jun 17 '20 at 18:04

For the browser, it is pretty easy to remove the folder, download and install it again. Alternatively, you could download the current version and compare the two folders.

For the profile, usually malware comes via extensions, so you can run Firefox without them (safe mode) and see if the suspect behaviour still happens. Or you can individually disable the ones you think could be the problem.

  • I use unsandboxed flash plugin, could malware infect the browser through it, theoretically speaking? – user161005 Jun 17 '20 at 16:03
  • Theoretically speaking it could infect your whole system... – Eduardo Trápani Jun 17 '20 at 18:04

Run in any terminal:

zip -r firefox.zip .mozilla

Upload firefox.zip to virustotal.com (mind that by doing that you'll share with them your browsing history, saved passwords and open website sessions).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.