Page 1 of 1

How to enable certain extensions?

Posted: Wed Aug 05, 2009 9:56 pm
by Guest
Hi guys, earlier versions of noscript (last year) have an bug when you open some iframe from a domain .au.
This bug was fixed, but the new version re-introduced this bug again. Noscript block this iframe because "think" that is an audio file.
Someone know how to fix it?
Kind regards
Marcelo

Re: How to enable certain extensions?

Posted: Wed Aug 05, 2009 10:26 pm
by Giorgio Maone
Can I see the page where it happens?

Re: How to enable certain extensions?

Posted: Wed Aug 05, 2009 11:20 pm
by Guest
Hi Giorgio,
This is an example:
http://www.zone-h.org/mirror/id/9316400
Regards
Marcelo

Re: How to enable certain extensions?

Posted: Wed Aug 05, 2009 11:30 pm
by Guest
When I open this example I see a warning message. "Do you want temporary enable http://www.zone-h.org/mirror/id/9316400 (<IFRAME>, audio/basic)"

Re: How to enable certain extensions?

Posted: Sun Aug 09, 2009 1:08 pm
by luntrus
Hi Guest,

These were the diagnostics for the link you presented.
From 400 pages that have been tested on mentioned site during the previous 90 days, 8 pages have been downloading and installing malicious programs without user's consent. Last time Google visited this site was on 2009-08-08. This was also the last time malicious content was found there.
Malicious software includes 10 scripting exploits, 5 Trojans, 1 exploit. Successful infection resulted in an average of 3 new processes on the target machine. Probably NS protected you from these infection vectors landing on your machine via a browser re-direct.

Malicious software is being hosted on 12 domains, e.g. cornetintl.com/, ss.la/, zone-h.net/.

3 of the domains seems to function as intermediaries for spreading malware to the visitors of mentioned site, e.g. zone-h.net/, ss.la/, dfgfdg.8866.org/.

This site was hosted on 1 network including AS16276 (OVH).
Bad Stuff detektor report:

No zeroiframes detected!
Check took 0.56 seconds

(Level: 0) Url checked:
hxtp://www.zone-h.org/mirror/id/9316400
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxtp://www.zone-h.org/mirror/id//js/zh.js
Blank page / could not connect
No ad codes identified

luntrus

Re: How to enable certain extensions?

Posted: Mon Aug 10, 2009 2:13 pm
by Guest
Dear Luntrus, Zone-H website make mirror of Attacked domains. Probably some of them have script to spread virus or anything what was create and posted by cracker (defacer) not by our site.