So much for FF/noscript

[DaChew]

I only go to a few dangerous web sites and usually just to check out which scripts are running from whom and site advisor

The last place I expected to find a trojan downloader was in cache

C:\Documents and Settings\Chewy\Local Settings\Application Data\Mozilla\Firefox\Profiles\ur1k2l0l.default\Cache\82B500BDd01 Infected: Trojan-Downloader.Win32.Delf.ilx 1

and I wouldn't have found it except I was trying to show that a kasp online scan of a selected folder was not that time consuming

I submitted it to jotti and almost all engines agreed

I scanned with MBAM and got a no infection

Didn't save it, just used atf cleaner on firefox

Still wondering how it got onto firefox, web site injection?

[GT500]

I don't think you were actually infected, because it was just sitting in your cache. Of course you must remember that even with noscript there are still security flaws that can allow infection.

[DaChew]

thanks GT,

What you said makes sense, the website had the code but w/o script it couldn't do anything with it.

Another mod at the forum where we investigate spam has complained about having to surf in a sandbox to questionable links, Hopefully those days are over as we have implemented some strong filters.