1

On my Vista PC the Firefox shortcut icon is being randomly renamed. The name changes to some variation of a recently visited URL. This unwanted action has survived several version updates. Of course I suspect a possible malware issue but as an IT professional I have tested many AV/AntiMalware programs on this PC over time which have not found any issues. I have also tried a variety of related file attrib changes without success. As this is an administrative PC I hate to to think that it might be spreading a well hidden malware instance, perhaps more damaging than just this nuisance symptom. Any thoughts?

PS Appreciate the lucid and practical information presented on this site. Well done.

3
  • Have you just tried deleting the shortcut altogether for awhile, to see if it comes back up? Have you deleted and re-created the shortcut, or always just renamed?
    – Iszi
    Jun 3, 2011 at 18:55
  • 2
    Are you sure the shortcut is for Firefox and not for some html file (which will be show Firefox' icon since it's the default handler of html files)? Jun 4, 2011 at 2:43
  • Hi @PMI, welcome to the site!
    – AviD
    Jun 7, 2011 at 15:46

1 Answer 1

6

To try to identify what's going on, I suggest the Sysinternals process monitor. Add a filter for file access and see if you can find what is touching it. If that doesn't show it, check for rootkits. If that doesn't show it, somebody thinks you're special and you've got something relatively unique going on.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .