How to enable certain extensions?

Ask for help about NoScript, no registration needed to post
Guest

How to enable certain extensions?

Post by Guest »

Hi guys, earlier versions of noscript (last year) have an bug when you open some iframe from a domain .au.
This bug was fixed, but the new version re-introduced this bug again. Noscript block this iframe because "think" that is an audio file.
Someone know how to fix it?
Kind regards
Marcelo
Opera/7.60 (Windows NT 5.2; U) [en] (IBM EVV/3.0/EAK01AG9/LE)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How to enable certain extensions?

Post by Giorgio Maone »

Can I see the page where it happens?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 (.NET CLR 3.5.30729)
Guest

Re: How to enable certain extensions?

Post by Guest »

Hi Giorgio,
This is an example:
http://www.zone-h.org/mirror/id/9316400
Regards
Marcelo
Opera/7.60 (Windows NT 5.2; U) [en] (IBM EVV/3.0/EAK01AG9/LE)
Guest

Re: How to enable certain extensions?

Post by Guest »

When I open this example I see a warning message. "Do you want temporary enable http://www.zone-h.org/mirror/id/9316400 (<IFRAME>, audio/basic)"
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2
luntrus
Senior Member
Posts: 237
Joined: Sat Mar 21, 2009 6:29 pm

Re: How to enable certain extensions?

Post by luntrus »

Hi Guest,

These were the diagnostics for the link you presented.
From 400 pages that have been tested on mentioned site during the previous 90 days, 8 pages have been downloading and installing malicious programs without user's consent. Last time Google visited this site was on 2009-08-08. This was also the last time malicious content was found there.
Malicious software includes 10 scripting exploits, 5 Trojans, 1 exploit. Successful infection resulted in an average of 3 new processes on the target machine. Probably NS protected you from these infection vectors landing on your machine via a browser re-direct.

Malicious software is being hosted on 12 domains, e.g. cornetintl.com/, ss.la/, zone-h.net/.

3 of the domains seems to function as intermediaries for spreading malware to the visitors of mentioned site, e.g. zone-h.net/, ss.la/, dfgfdg.8866.org/.

This site was hosted on 1 network including AS16276 (OVH).
Bad Stuff detektor report:

No zeroiframes detected!
Check took 0.56 seconds

(Level: 0) Url checked:
hxtp://www.zone-h.org/mirror/id/9316400
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxtp://www.zone-h.org/mirror/id//js/zh.js
Blank page / could not connect
No ad codes identified

luntrus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1) Gecko/20090806 Namoroka/3.6a1
Guest

Re: How to enable certain extensions?

Post by Guest »

Dear Luntrus, Zone-H website make mirror of Attacked domains. Probably some of them have script to spread virus or anything what was create and posted by cracker (defacer) not by our site.
Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Post Reply