A new Firefox Trojan had been discovered that forces the browser to save password and used them on an infected PC to create new user account.The Trojan-PWS-Nslog malware was discovered by security Company Webroot. Actually the Trojan adds a few lines of the code and comments out the other portions of the code from the file of the Firefox file called "nsLoginManagerPrompter.js" with the result that all the passwords get saved locally without any input from the user.
The Trojan Creates a new account under the name "Maestro" on the infected computer. It then "scrapes information from the registry, from the so-called Protected Storage area used by IE to store passwords, and from Firefox's own password storage, and tries to pass the stolen information onward, once per minute - added by Webroot researcher Andrew Brandt.
Webroot can easily identify and remove the Trojan from infected machines, it says. To fix the modified Firefox file, users should download the latest Firefox installer and install it over the existing installation. No bookmarks or add-ons will be lost in the process, Brandt said.
Since, Firefox ranks 2nd in Browser market, also by default it does remember password. to avoid to these, go to tools in menu and select options, select security tab and uncheck the remember password, Webroot Advices.
So, be safe while browsing from our all time favorite Mozilla Firefox ..
Using AVG security for a number of years, and I'd recommend this solution to you all.