[tomdkat]

http://www.computerworld.com/s/artic..._users_at_risk

An add-on that Microsoft silently slipped into Mozilla's Firefox last February leaves the browser open to attack, Microsoft's security engineers acknowledged earlier this week.

One of the 13 security bulletins Microsoft released Tuesday affects not only Internet Explorer (IE), but also Firefox, thanks to a Microsoft-made plug-in pushed to Firefox users eight months ago in an update delivered via Windows Update.

Some have been getting a popup warning from Firefox indicating the Windows Foundation Add-on was disabled due to a security issue.

Here is a follow-up article:

http://www.pcworld.com/article/17387...r_firefox.html

Mozilla has now unblocked a Microsoft add-on thought to pose a danger due to a software vulnerability, but a second add-on remains blocked, the organization said on Sunday.

Microsoft has confirmed that the .NET Framework Assistant add-on can't be used as a "mechanism" for exploiting a vulnerability in Internet Explorer (IE), wrote Mike Shaver, Mozilla's vice president of engineering, on Sunday. The add-on enables what's called "ClickOnce" support, a Microsoft technology for application deployment.

Peace...

[Stoner]

I got the warning that the Windows Foundation Add-on was disabled, but it was never in my list of add-ons before or after the block.
Is that normal?

[hewee]

I did not get any thing put back.
I did away with all these long ago and again in June I think and thought it was back again after the MS update last week but it was not.

[tomdkat]

Originally Posted by Stoner

I got the warning that the Windows Foundation Add-on was disabled, but it was never in my list of add-ons before or after the block.
Is that normal?

It won't appear in the "Extensions" list in the add-ons window but in the "Plug-ins" list. I experienced the same thing and I believe that's normal.

Peace...

[Stoner]

Thanks .......yep....that's where it was.

[skyhigh007]

I just got the pop up yesterday! So can we sue Microsoft? All my personal information are hacked?

[hewee]

This is what I did to clear things up the first time back in Feb, 2009 and then I think June when it came back but the Net Framework Assistant had a uninstall that time.

http://cordobo.com/878-uninstall-mic...ork-assistent/

Now the file in the registry was not in the very same place but another Mozilla\Firefox\ just above or under the one list but it is easy to find because of the name “{20a82645-c095-46ed-80e3-08825760534b}” and “@microsoft.com/WPF,version=3.5”.

You can do a system backup and or highlight the key above and export it before deleting.