Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Norton Unsafe site


  • Please log in to reply
6 replies to this topic

#1 vince29

vince29

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:08:58 PM

Posted 27 December 2008 - 02:13 PM

Hi
I have visited your site on a few occasions & subscribed to some threads however when i logged into a thread today norton returned the following details.
Site Owner? Click here
bleepingcomputer.com

Summary
Threats to your computer: 4
Threats to your identity: 0
Annoyance factors: 1

Total threats on this site: 5

Community Reviews: 2



The Norton rating is a result of Symantec's automated analysis system. Learn more.
The opinions of our users are reflected separately in the community rating on the right.
General Info
Web Site Location Unknown


Norton Safe Web has analyzed bleepingcomputer.com for safety and security problems. Below is a sample of the threats that were found.
Threat Report
Total threats found: 5


Drive-By Downloads (what's this?)
Threats found: 3
Here is a sample:

Threat Name: Trojan.Cinmeng
Signature (MD5): 566b0dec9f098c4ab9a68ec46be86635
Location: http://www.bleepingcomputer.com/malware-re...-rapidantivirus



Threat Name: Unnamed Drive-By Download
Location: http://www.bleepingcomputer.com/malware-re...-rapidantivirus



Direct link to:
Location: http://www.bleepingcomputer.com/malware-re...tal-secure-2009




Viruses (what's this?)
Threats found: 1
Here is a sample:

Threat Name: W32.Spybot.Worm
Signature (MD5): 0b7a73062da31deb362eff28bfd4076e
Location: http://download.bleepingcomputer.com/andymanchesta/SDFix.exe




Hard to Uninstall (what's this?)
Threats found: 1
Here is a sample:

Threat Name: Unnamed Hard to Uninstall
Signature (MD5): 63d8800c414d59ed7c46460884d479a4
Location: http://bleepingcomputer.com/sUBs/ComboFix.exe


I was wondering why this should be
vince29

BC AdBot (Login to Remove)

 


#2 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:02:58 PM

Posted 27 December 2008 - 04:48 PM

They're false alarms.
The first 3 links lead to removal instructions for Rapidantivirus, and Total Secure 2009, which are malicious programs.

The bottom 2 links are for tools used by the HJT Team, in their fight against malware.

I've disabled the link in your post, to ComboFix.exe, since this is a program that should not be used without supervision.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#3 Galadriel

Galadriel

    Bleepin Elf


  • Malware Response Team
  • 2,755 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Missouri, USA
  • Local time:02:58 PM

Posted 27 December 2008 - 05:04 PM

Hello vince29 and welcome to BC! :thumbsup:

As tg1911 already pointed out, these are false alarms or false positives.

There's a reason Norton flags those as unsafe, and that reason is mostly about the names and some of the content of those links. The files it warned about probably show up because of heuristics scans and those are indeed false positives as well. That's not the first time those tools get targetted wrongly by AV companies. I can assure you that there's nothing here that is malicious.

The reason the guides are flagged is because of the content, there's in depth descriptions of those threats and Norton may see that as a threat when in reality, they are just text, nothing gets executed. Automated analysis tools often will give you that kind of result so you have to be weary of trusting them.
I cemna prestar aen. Han mathon ne nen. Han mathon ne chae. A han noston ne 'wilith. - Galadriel
'The avatar is changed; I can feel it in the water, I can feel it in the earth, I can smell it in the air.'

Phear teh ceiling cat, for he is roofkittehd! - Basement Cat

I'm a Bleeping Folder, are you? - Join BC in the fight against diseases - Click here
Become a BleepingComputer fan: Facebook

#4 vince29

vince29
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:08:58 PM

Posted 28 December 2008 - 10:07 AM

many thanks for your prompt replies

#5 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:03:58 PM

Posted 28 December 2008 - 03:39 PM

Requested a reevaluation from them.

#6 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:03:58 PM

Posted 28 December 2008 - 08:51 PM

This issue appears to have been resolved.

http://safeweb.norton.com/report/show?url=...ingcomputer.com

#7 vince29

vince29
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:08:58 PM

Posted 29 December 2008 - 04:01 AM

site now showing as safe again many thanks
vince




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users