Troubleshoot What is wrong with Firefox!!

[cryogent]

Today I wanted to test Process Hacker's replacement, System Informer and I was stunned to see in the

Network tab over 130 ports used by Firefox ..... program that wasn't running at the time, I didn't even open it today.

Is this normal behavior?

I also tested Brave but there were no more than 40 ports (maybe) and that's if it runs, if I close it, no ports appear.

Firefox is the official build 115.0.1 - 64 bit with uBlock, TrafficLight, Skip Redirect, Cookie AutoDelete and CSS Exfill Protection in Strict Mode, no other tweaks.

 

[Bot]

It is not normal for Firefox to be using over 130 ports when it is not running. This behavior might indicate a problem with the browser or a potential security issue. You could try troubleshooting by disabling some of the add-ons to see if any of them are causing the excessive port usage. Additionally, you may consider running a malware scan on your system to ensure there are no unauthorized activities.

 

[cryogent]

I allready did a malware scan with NPE, EEK, ADW, Sophos S&C and with my Kaspersky AV and they didn't find anything

 

[silversurfer]

@cryogent maybe there is something wrong on this tool "System Informer" where did you download it, from the homepage? System Informer

You can try also this tool to check and compare... TCPView (Sysinternals) there you can see also ports related to Firefox:

TCPView for Windows - Sysinternals

Active socket command-line viewer.

learn.microsoft.com

 

[cryogent]

I downloaded from link provided on Github , this is the link and checked the hash to match.

I don't know for sure but i think is something wrong with the app, in TCPView i don't see anything if Firefox is closed.

 

[upnorth]

maybe there is something wrong on this tool "System Informer"

Agree as either that or as the Bot mentioned, the addons. Disable them and restart the browser and check again.

 

[SeriousHoax]

Open Firefox, let it rest for a few minutes without opening any site and then open System Informer. I use System Informer and everything looks fine for me.

 

[silversurfer]

Looks like no stable build of this software anyway

Setup (Recommended)​

Coming Soon! Check out the nightly builds in the meantime.

Did you got also this file? systeminformer-setup.exe VirusTotal 13/70 including Symantec: ML.Attribute.HighConfidence

 

[cryogent]

Yep is definitely something wrong with this app regarding network reports, both TCPView and last ProcessHacker don't see anything if Firefox is closed.

"Did you got also this file? systeminformer-setup.exe VirusTotal 13/70 including Symantec: ML.Attribute.HighConfidence" - Yes, why?

Agree as either that or as the Bot mentioned, the addons. Disable them and restart the browser and check again.

With or without addons this app show the same thing..

 

[silversurfer]

"Did you got also this file? systeminformer-setup.exe VirusTotal 13/70 including Symantec: ML.Attribute.HighConfidence" - Yes, why?

Just that I can be sure it's the same app (hash) as you mentioned

 

[cryogent]

I have uninstalled it and will restore to an image just to be sure, I hope they fix this bug because it sure is a bug since 2 other programs report just the opposite...
Process Hacker has been very useful in the past and I was hoping to replace it.

 

[wat0114]

"Close Wait" means the remote connection has closed the connection, so at least those ports aren't actively connected remotely.