Trojan that targets Firefox

[Duh_OZ]

http://www.bitdefender.com/VIRUS-1000451-en--Trojan.PWS.ChromeInject.B.html
=======
It drops an executable file (which is a Firefox 3 plugin) and a
JavaScript file (detected by Bitdefender as:
Trojan.PWS.ChromeInject.A) into the Firefox plugins and chrome folders
respectively.

It filters the URLs within the Mozilla Firefox browser and whenever
encounter the following addresses opened in the Firefox browser it
captures the login credentials.
========

 

[Beauregard T. Shagnasty]

http://www.bitdefender.com/VIRUS-1000451-en--Trojan.PWS.ChromeInject.B.html
=======
It drops an executable file (which is a Firefox 3 plugin) and a
JavaScript file (detected by Bitdefender as:
Trojan.PWS.ChromeInject.A) into the Firefox plugins and chrome folders
respectively.

Seems to affect only Firefox for Windows.

<quote>
SYMPTOMS:
Presence of the:
"%ProgramFiles%\Mozilla Firefox\plugins\npbasic.dll"
"%ProgramFiles%\Mozilla Firefox\chrome\chrome\content\browser.js"
files in the Mozilla Firefox's plugins and chrome folders.

It filters the URLs within the Mozilla Firefox browser and whenever
encounter the following addresses opened in the Firefox browser it
captures the login credentials.

They should have sorted the bank list alphabetically... ;-)