sexybeast said: C:Documents and SettingsStewieLocal SettingsApplication DataMozillaFirefoxProfilesz7a2xcck.defaultCache47E258A3d01 HTML/Exploit.IESlice.NAC trojan quarantined - deleted Event occurred on a new file created by the application: C:Program FilesMozilla Firefoxfirefox.exe. The file was moved to quarantine. h**p://wm-servis.cn/index.php HTML/Exploit.IESlice.NAC trojan Connection terminated ANDRESStewie

I got the exact same log from NOD32, with the addition of:

C:Documents and Settings...DataMozillaFirefoxProfiles8srrdz17.defaultCacheE69AB7EFd01 Win32/Adware.NdotNet application quarantined - deleted
Event occurred on a new file created by the application: C:Program FilesMozilla Firefoxfirefox.exe. The file was moved to quarantine.

C:DOCUME~1...LOCALS~1Tempv2zw432a.exe Win32/Adware.NdotNet application quarantined - deleted
Event occurred on a file modified by the application: C:Program FilesMozilla Firefoxfirefox.exe. The file was moved to quarantine.

All of these occurred for the first time ever yesterday, even though I'm using Firefox WITH Adblock Plus.

Looks like I'll have to consider that Noscript extension, but I really hope these bugs are ironed out soon.

Now I need to figure out if I am not getting it, or just not detecting it.

I was attacked by these ones when i visited site with IE7 + Avira AntiVir which blocked 'em:

JS/Dldr.Agent.ab.12
JS/Dldr.Psyme.du
JS/Dldr.Small.CR.2
Html/Shellcode.Gen
Html/Heur.Exploit
Html/Dldr.Agen.N.15

Some might be from ad's, but some may not be.

Anyways problem solved with Opera 9.23 + Avira Antivir.

Html/Heur.Exploit

I did have that one recently.

I visit the site with Firefox without any ad-blocking software and NOD32 hasn't shown me an attack... ever. :/

I have no trouble at all, but Firefox is blocking a popup every now and then. I don't think this site had any popups earlier.

Oh, looks like it's already been reported. Glad I have NOD32 :)

This is what I'm getting if it helps...

File
HTTP://wm-servis.cn/1/index.php

Threat
HTML/Exploit.IESlice.NAC trojan

How nice! :D

It appears that link takes me to some other site... :/

Me too. I got some virus. Like this:

C:Documents and SettingsIgorConfigurações locaisTemporary Internet FilesContent.IE5FUNYMMF0Slide435(1).htm
or
C:Documents and SettingsIgorConfigurações locaisTemporary Internet FilesContent.IE5FUNYMMF0Slide435(2).htm

I'm using Firefox Ver. 2.0.0.6....