How do you know it disguised itself as Firefox? Wouldn't you have to download firefox and then find out, oh snap, that wasn't really firefox?