• We've upgraded our forums. Please post any issues/requests in this thread.

cross-site scripting

Joined
Apr 2, 2007
Messages
2,807 (0.72/day)
Likes
230
Location
US
Processor Intel Q9400
Motherboard asus p5q-pro
Cooling Ultra120
Memory 6GB ddr2
Video Card(s) NVS 290
Storage 3TB + 1.5TB
Display(s) Samsung F2380
Case Silverstone Fortress FT02B
Audio Device(s) Creative X-Fi
Power Supply 750W PC P&C
Software win 7 ultimate 64bit
#1

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
17,068 (3.44/day)
Likes
17,975
Processor Core i7-4790K
Memory 16 GB
Video Card(s) GTX 1080
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 7
#2
uh?
 
Joined
Apr 2, 2007
Messages
2,807 (0.72/day)
Likes
230
Location
US
Processor Intel Q9400
Motherboard asus p5q-pro
Cooling Ultra120
Memory 6GB ddr2
Video Card(s) NVS 290
Storage 3TB + 1.5TB
Display(s) Samsung F2380
Case Silverstone Fortress FT02B
Audio Device(s) Creative X-Fi
Power Supply 750W PC P&C
Software win 7 ultimate 64bit
#3
that's what I said, but it did it to me a few times already
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
17,068 (3.44/day)
Likes
17,975
Processor Core i7-4790K
Memory 16 GB
Video Card(s) GTX 1080
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 7
#4
can you explain what you are doing and what happens?
 
Joined
Apr 2, 2007
Messages
2,807 (0.72/day)
Likes
230
Location
US
Processor Intel Q9400
Motherboard asus p5q-pro
Cooling Ultra120
Memory 6GB ddr2
Video Card(s) NVS 290
Storage 3TB + 1.5TB
Display(s) Samsung F2380
Case Silverstone Fortress FT02B
Audio Device(s) Creative X-Fi
Power Supply 750W PC P&C
Software win 7 ultimate 64bit
#5
When I go to techpowerup.com (using Firefox 3.0.4) I sometimes (about 30% of the time) get this:

this is what no script console shows:


Right after that I got the message from Adobe reader saying it can't open pdf file in firefox because ... well, I just can't get it to work with latest firefox. Then page is transfered to the link below:
http://76.74.239.143/zzaweoiweoiw/pdf.php?id=6105&vis=1

That is all. I don't know what that is. I'm probably making too big of a deal out of it.

Oh, and no-script is set to allow all script and it still does it.
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
17,068 (3.44/day)
Likes
17,975
Processor Core i7-4790K
Memory 16 GB
Video Card(s) GTX 1080
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 7
#7
anyone else see this?
 
Joined
Jul 30, 2007
Messages
6,560 (1.73/day)
Likes
835
System Name Vintage
Processor i7 - 3770K @ Stock
Cooling Scythe Zipang II
Memory 2x4GB Crucial DDR3
Video Card(s) MSI GTX970
Storage M4 124GB SSD// WD Black 640GB// WD Black 1TB//Samsung F3 1.5TB
Display(s) Samsung SM223BW 21.6"
Case Generic
Power Supply Corsair HX 520W
Software Windows 7
#9
nope not to me.
 
Joined
Apr 2, 2007
Messages
2,807 (0.72/day)
Likes
230
Location
US
Processor Intel Q9400
Motherboard asus p5q-pro
Cooling Ultra120
Memory 6GB ddr2
Video Card(s) NVS 290
Storage 3TB + 1.5TB
Display(s) Samsung F2380
Case Silverstone Fortress FT02B
Audio Device(s) Creative X-Fi
Power Supply 750W PC P&C
Software win 7 ultimate 64bit
#10
you must have some sorta virus/worm/spyware/etc.
I have nod32 running in background all the time
I'll try some free anti-adware/spyware to see what is going on

EDIT:
Ok, I found one trojan, but it just displays web content on your desktop saying that your computer is infected...
 
Last edited:

Polaris573

Senior Moderator
Joined
Feb 26, 2005
Messages
4,268 (0.91/day)
Likes
672
Location
Little Rock, USA
Processor LGA 775 Intel Q9550 2.8 Ghz
Motherboard MSI P7N Diamond - 780i Chipset
Cooling Arctic Freezer
Memory 6GB G.Skill DDRII 800 4-4-3-5
Video Card(s) Sapphire HD 7850 2 GB PCI-E
Storage 1 TB Seagate 32MB Cache, 250 GB Seagate 16MB Cache
Display(s) Acer X203w
Case Coolermaster Centurion 5
Audio Device(s) Creative Sound Blaster X-Fi Xtreme Music
Power Supply OCZ StealthXStream 600 Watt
Software Windows 7 Ultimate x64
#11
I'm using Firefox and NoScript and that never happens to me.
 
Joined
Apr 14, 2008
Messages
3,338 (0.94/day)
Likes
500
Location
Brooklyn, New York 11223
System Name Mine | Dad + Mom
Processor E8500 E0 Wolfdale @ 4.6GHz 1.5V | E2180 M0 Allendale @ 3.0GHz 1.3V
Motherboard Asus Maximus Formula (X48) w/ Rampage BIOS | Asus P5Q Pro (P45)
Cooling Xigmatek Rifle HDT-S1283 w/ SFF21F Fan | Arctic Cooling Freezer 7 Pro
Memory G.Skill Pi Black 2x2GB 1.02GHz CL5 | OCZ Reaper 2x2GB 1.05GHz CL5
Video Card(s) Sapphire 4870X2 2GB 820/1020MHz | Sapphire 4850 1GB 700/1100MHz
Storage WD VR 150GB 10K RPM + WD 500GB 7.2K RPM | WD 200GB 7.2K RPM
Display(s) Acer P243WAID 24" 1920x1200 LCD | Acer V193W 19" 1440x900 LCD
Case Cooler Master HAF 932 Full-Tower | Antec Twelve Hundred Mid-Tower
Audio Device(s) Fatal1ty Xtreme Gamer w/ Z-5500 5.1 | On-Board Audio w/ S-220 2.1
Power Supply PC Power and Cooling 750W Non-Modular | Corsair HX-520W Modular
Software Windows Vista Home Premium X64 | Windows Vista Home Premium X64
Benchmark Scores Not Wasting Time!
#12
Have u did some tweaks in about:config in firefox. Try resetting all the changes u made.

go to the address bar and type about:config. It's for advanced tweaking.
 
Joined
Apr 2, 2007
Messages
2,807 (0.72/day)
Likes
230
Location
US
Processor Intel Q9400
Motherboard asus p5q-pro
Cooling Ultra120
Memory 6GB ddr2
Video Card(s) NVS 290
Storage 3TB + 1.5TB
Display(s) Samsung F2380
Case Silverstone Fortress FT02B
Audio Device(s) Creative X-Fi
Power Supply 750W PC P&C
Software win 7 ultimate 64bit
#13
didn't do any tweaks there
and this windows is about 2 weeks old
 
Joined
Jan 4, 2008
Messages
1,818 (0.50/day)
Likes
241
Location
Just South of Mars
System Name Decent Lappy
#14
No script filters cross-site scripting on techpowerup.com
Then page is transferred to
http://76.74.239.143/zzaweoiweoiw/pdf.php?id=6105&vis=1

Any explanation?
Hate to say it, but if you Google just part of that thread there is some discussion of an "exploit" out there that redirects you to the very document you have listed. I would run a few different Anti virus programs as well as CCleaner to rule out any exploits. (Newsvine)

http://www.google.com/search?hl=en&q=http://76.74.239.143&btnG=Search
 
Joined
Apr 2, 2007
Messages
2,807 (0.72/day)
Likes
230
Location
US
Processor Intel Q9400
Motherboard asus p5q-pro
Cooling Ultra120
Memory 6GB ddr2
Video Card(s) NVS 290
Storage 3TB + 1.5TB
Display(s) Samsung F2380
Case Silverstone Fortress FT02B
Audio Device(s) Creative X-Fi
Power Supply 750W PC P&C
Software win 7 ultimate 64bit
#15
lol, that sucks!
it doesn't redirect me to pdf file anymore, but i still see the cross-site script sign
oh well, I didn't do an upgrade to run less anti-virus programs :))
 
Joined
Apr 2, 2007
Messages
2,807 (0.72/day)
Likes
230
Location
US
Processor Intel Q9400
Motherboard asus p5q-pro
Cooling Ultra120
Memory 6GB ddr2
Video Card(s) NVS 290
Storage 3TB + 1.5TB
Display(s) Samsung F2380
Case Silverstone Fortress FT02B
Audio Device(s) Creative X-Fi
Power Supply 750W PC P&C
Software win 7 ultimate 64bit
#16
ok, its gone now for sure.