Today I googled the name of a domain that was reportedly serving up malware. My search results came up (with the compromised domain at the top of the list) and within seconds my AV gave an alert saying that it had detected some js malware in my temporary files.
I had only searched for the company on google. No clicks were made. Therefore, I'm assuming this detection is the result of prefetching performed by Google Chrome which must have loaded the malicious file.
My question is: could this malware execute, or would it be sandboxed by some safety mechanism that might exist for the prefetch/preload pages?