Site can't be marked untrusted

[faster]

Something has compromised NoScript on my PC. A site, with the DNS: 127.0.0.1 cannot be marked untrusted. It is a site that seems to want to be the domain people use or something. Whatever it is, this site blocks me from visuals when I'm browsing Yahoo. It's apparaently too new to have a WOT rating. But I thought it was a felony to tamper with programs on someone's PC.

They're blocking Yahoo on Firefox, and are preventing me from using NoScript to mark it as untrusted. It just doesn't go away. If I'm looking at the Yahoo homepage and click to mark that site as untrusted, the visuals START to appear, then stop. This site puts itself back on the trusted list.

I'd recommend you check this out, so you can include tricks like this in your next update.

Meanwhile, should I reinstall NoScript? If so, would I lose all my permissions?

I can't praise you enough for this add-on. I wish I could use it on Chrome, too, since I occasionally use it.

Holly B.

[barbaz]

NoScript can't be expected to do anything about malware.
see General Troubleshooting Instructions #2

[faster]

Don't get me wrong - I do NOT expect NoScript to correct malware. But how can I be sure this IS malware? I've done a couple of scans and not found anything. I've gone to Internet Options and put it on to the list of blocked sites, but I don't think Internet Options applies anywhere but IE.

Since it could be malware, would you recommend against reinstalling NoScript, since it would just come right back?

[barbaz]

It sounds like you're not running a local web server or proxy software that could/would do this, given your description of 127.0.0.1 in the OP, so therefore I conclude that something you don't know about has been installed that is trying to run scripts from your localhost everywhere - and plus, this thing is interfering with NoScript's normal operation. Stinks of malware if you ask me. Am I wrong in my assessment?

Oh, and I suggest you definitely keep NoScript until you get it sorted!

[faster]

YOU need to know what I just learned.

I DID just manage to mark 127.0.0.1 untrusted. I went to your whitelist. There I found a bunch of grayed-out sites that I didn't want, but couldn't remove them. At the bottom of that window, though, I discovered that NoScript had been set to allow scripts globally.

I absolutely did NOT set that. It was set by the malware. I didn't know it was set that way until I looked at the Whitelist. Now that it's untrusted, I get the sound that tells me a site has been blocked, every time this thing tries to invade.

So that means NoScript WAS tampered with on my computer, which means it can be similarly tampered with on other PCs.

It's up to you, but I'd urge you to look into this. Maybe the next version can prevent NoScript settings from being made by someone other than the user. This thing will really mess up a person's browsing.

Also, in WOT, I've found a large number of commenters who praise this site. They can't be genuine. The site is probably putting them there itself. How could anyone praise a site that messes up their browsing so effectively - and on any browser, too?

Thanks for your help. I love you guys.

[barbaz]

You're welcome. Glad it's working again.

BTW 127.0.0.1 is NOT a "site", it's your own computer...

[therube]

Given that its 127.0.0.1 (aka loopback) possible too that its an A/V, firewall or similar interfering.

What are you using for your antivirus, firewall?