topic Threat in good and reputed website in Norton Internet Security / Norton AntiVirus

Threat in good and reputed website

silverhawk — Mon, 18 May 2009 23:28:19 GMT

I was just searching some plugins for winamp for my friend..i do not use winamp. but for my friend was just searching some cool plugins for winamp and what i discoverd is when i try to download some plugin norton warns me and blocks the threat.. the site is well reputed though... have a look guys...try o download and see...thank god i have Norton...i was escaped!!

http://www.winamp.com/plugins/details/221551

http://www.winamp.com/plugins/details/221939

Report from safeweb.

http://safeweb.norton.com/report/show?url=nullsoft.com

I think Symantec should tell this nullsoft.inc to stop spreading threats

Re: Threat in good and reputed website

huwyngr — Tue, 19 May 2009 01:04:28 GMT

I'm not sure that I understand the problem as you outline it with the reference to nullsoft.

I just went to the first of the links you give and Norton did not declare anything wrong with the site. I then downloaded something using the Grab it now on that page and NIS 2009 downloaded it with no flags. I then did a scan now on the file and it checked 2 files and came up clean.

So I don't see anything wrong there.

FWIW

Re: Threat in good and reputed website

silverhawk — Tue, 19 May 2009 01:40:23 GMT

just hit the download button and than NIS shows in site safety bar...just see my system screenshot...

http://img234.imagevenue.com/img.php?image=00567_Untitled1_122_22lo.jpg

http://img254.imagevenue.com/img.php?image=00635_Untitled2_122_600lo.jpg

Re: Threat in good and reputed website

huwyngr — Tue, 19 May 2009 17:10:11 GMT

I just looked at your screenshot -- the first one -- and then went to the first URL in your original message and clicked on the download button -- Get it now -- and it went through the usual Run / Save screens without any error flags and so I downloaded it (it told me I already had so I overwrote it) and after downloading I ran NIS Scan Now on the downloaded file which came up clean.

At no point did I get anything like your screen shot.

So the problem would seem to be at your location since neither previously nor now did I get any danger flags from NIS 2009.

Re: Threat in good and reputed website

sevenredseven — Tue, 19 May 2009 21:52:39 GMT

Someone's Norton product found a threat called Infostealer.Gampass in
http://download.nullsoft.com/customize/component/2006/4/2/P/Procrustes.exe
and therefore your Norton product warns you of nullsoft.com

Perhaps it depends on your Norton settings whether you get those Norton Safe Web warnings or not?

My Norton AntiVirus also finds a threat called Infostealer.Gampass in
http://download.nullsoft.com/customize/component/2006/4/2/P/Procrustes.exe

The plugins in your message are safe according to my Norton AntiVirus.

Message Edited by sevenredseven on 19.05.2009 02:45 PM

Message Edited by sevenredseven on 19.05.2009 02:47 PM

Message Edited by sevenredseven on 19.05.2009 02:51 PM

Message Edited by sevenredseven on 19.05.2009 02:52 PM

Re: Threat in good and reputed website

silverhawk — Wed, 20 May 2009 05:16:33 GMT

today i again tried to download, and there was no such warning...i am just wondering how dat happened..well seems good.. i usually do not download the whole file if norton flags that the site contain any threats...prevention is better than cure....