noscript didn't catch a virus infected site

General discussion about the NoScript extension for Firefox
Post Reply
alloallo
Posts: 1
Joined: Mon Oct 03, 2011 9:24 am

noscript didn't catch a virus infected site

Post by alloallo »

I went to this site http://www.laptopvirusrepair.co.uk and my virusscanner detects a virus/malware immediately. It looks like NoScript didn't prevent this.

more info http://blogs.paretologic.com/malwaredia ... its-users/
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
dhouwn
Bug Buster
Posts: 968
Joined: Thu Mar 19, 2009 12:51 pm

Re: noscript didn't catch a virus infected site

Post by dhouwn »

alloallo wrote:It looks like NoScript didn't prevent this.
From downloading? Well, it's an inline script.
From running? It certainly did, unless you allowed that site.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: noscript didn't catch a virus infected site

Post by therube »

Even if you allowed laptopvirusrepair.co.uk, you would still (almost assuredly) be protected, because the malware code is hosted on a foreign domain (be it zdesestvareznezahodi.com or alienego.com or whatever they may be using at a particular time) & those domains (by default) would not be allowed.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20110928 Firefox/7.0.1 SeaMonkey/2.4.1
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: noscript didn't catch a virus infected site

Post by GµårÐïåñ »

I deal with malicious sites for a living and I do it on my OWN, PERSONAL, PRODUCTION machine that I do everything else, including banking and I have NEVER had a problem. I hate to say this to a user, but you probably screwed up and did something you shouldn't have or are being led to believe you are infected, otherwise, using NS as directed and in many cases even if you don't, will protect you against anything that is script based.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/6.9 (Windows NT 6.9; rv:6.9) Gecko/69696969 Firefox/6.9
Post Reply