Page 1 of 1

[UNRELATED] URL:MAL when opening Firefox, assuming NoScript

Posted: Mon Jul 23, 2012 3:43 pm
by sebax123_
Avast network shield detects URL:MAL when opening Firefox.No issue with IE or Chrome.
After troubleshooting realized problem is NoScript addon.
Could it have been infected or maybe the infection I have uses a vulnerability in the plug in?

If I disable or remove no script I don't get the warning from antivirus, if I re-intall noscript the pop up appears again each time.

Please note I also changed the homepage...from google.com to something else and it has no effect, so definitely it is not a script on the page.


I am now running in depth virus/malware scans to see were the actual infection is.
However I am concerned that there might be some malware that can exploit vulnerabilities in this addon which I like very much.

Re: URL:MAL when opening Firefox,realized problem is NoScrip

Posted: Mon Jul 23, 2012 5:37 pm
by dhouwn
Could be ABE's IP detection, try disabling that.

Re: URL:MAL when opening Firefox,realized problem is NoScrip

Posted: Mon Jul 23, 2012 10:41 pm
by GµårÐïåñ
Its a false positive. The ABE IP should not be triggering anything.

Re: URL:MAL when opening Firefox,realized problem is NoScrip

Posted: Tue Jul 24, 2012 12:16 pm
by sebax123_
Hi, it wasn't a false positive , I had several infections..which are now all clean, and I am back and running, I can also see a visible system speed improvement.


PHP:Agent-Ij[Trj]
PHP:Agent-DZ[Trj]
PUP:Win32:Pup-gen[PUP]
Threat:Win32:WrongInf-C[Susp]
Threat:Win32:Malware-gen

Re: URL:MAL when opening Firefox,realized problem is NoScrip

Posted: Tue Jul 24, 2012 8:55 pm
by GµårÐïåñ
My answer was directed at you saying it was NoScript and dhouwn saying it was the ABE IP, both of which I stand by. If you found viruses and are cleared up and now everything is working good, that's great to hear but that doesn't change assessment on OUR end.