I booted my Win 10 today and started Firefox. All of a sudden I got the "warning" in the title. The add-on was Search and New Tab by Yahoo. I looked in my installed applications and right at the bottom I had a newly installed application called Yahoo Search Set. Needless to say I didn't install it.

The problem with the message above is that it doesn't provide enough information about who's trying to install the add-on. Yes, in this case I got it right but what are the chances of an adware or other malicious piece of software (I view Yahoo Search Set as well as the Firefox add-on as such since it installed without me saying so) announcing itself in a clear way?

Is there a way to find who is trying to add something new to Firefox (or any other mainstream browser for that matter)?

  • You can always try to infer the program that carried the malware using the install date. – Daniel B Aug 3 '17 at 8:10
  • Unless other software was installed after the malware installed itself, which will make things more difficult. I was looking of a more straight forward method without the need to manually check the list of installed software. – rbaleksandar Aug 3 '17 at 12:09
  • ? Windows records the install date of all programs. Unless something else was installed on the same day, you’ll be able to narrow down the search a lot. – Daniel B Aug 3 '17 at 12:16
  • "Unless something else was installed on the same day" I'm looking for a solution that is independent from the time the malware installed itself, how it's called etc. (basically everything that involves manual search no matter how small the effort is). – rbaleksandar Aug 3 '17 at 13:30
  • You may try AdwCleaner from Malwarebytes. – Biswapriyo Aug 31 '17 at 9:49

I would bet real money that it came from installing Java.

If that's not the case, you might also want to check for the presence of Spigot on your machine.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.