I am using Firefox 3.5.4. My top-right search bar uses Google, and I have the autosuggest on because I like it. Please also note that I have turned of prefetch in Firefox (look at my other posts and you'll see why)
For whatever reason, when I start to type "javascript createobject", the search bar will autocomplete as usual but Norton will tell me that it blocked a "HTTP MS Unsafe ActiveX Obj Installation"! What is happening?
The attacker url is a standard Google autocomplete url, and the destination address is either translate.google.com or www.youtube.com. I looked up "HTTP MS Unsafe ActiveX Obj Installation" and it says it has something to do with Visual Studio 2005: http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=21864 I have Visual Studio 2008, so maybe it is related to that?
I would guess that this is a drive-by-download or something, but how could a google autocomplete do that? Am I overlooking something, or can someone verify that this is a problem? Thanks for your help!