InformAction Forums

I justed checked a demo on ClickJacking: http://ha.ckers.org/weird/followmouse.html
And sadly the default ClickJacking prevention mechanism in IE catches it and NoScript doesn't alert me or prevents it?

I have ClearClick enabled on trusted and untrusted sites.

Nope, ClearClick is working just fine.
That demo is implemented wrongly, since it doesn't account for a real world scenario (i.e. the parent "attacker" document being on a different domain than the embedded "victim" iframe).
Please check http://raffon.net/research/cj/cj.html or another cross-site "real world" PoC, instead.