• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Unblocking A Website

Hi. Norton Security Deluxe is blocking Tak Taraneh  mistakenly.

I already submitted a form to "Security Response Anti-Fraud" section of Norton via this link: https://submit.symantec.com/false_positive/

Now, after 5 days, I didn't receive any response from them. So I decided to post a topic, so that maybe I get a response!

Also, I contacted with the administrator of the website and he confirmed that there is no malware on his website.

I tested the website on Virus Total online scanner which uses 66 Anti-Virus engines and it didn't detect any malware on the website. You can see the result in the link below:

https://www.virustotal.com/#/url/33d4edb15e07ebcd09d9e3c42e694733dfd108d...

PLEASE release an update as soon as possible for Norton Security Deluxe in order to unblock this website and post an answer here for me.

Thank you in advance.

Replies

Kudos0

Re: Unblocking A Website

Did you look at the detailed report for that site?  https://safeweb.norton.com/report/show?url=www.4taktaraneh.org

The detection is for PUA.JScoinminer as shown at the bottom of this image. Have the developer check his site again, looking for this file.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: Unblocking A Website

Yes, I already looked and informed the website owner of this file; but he claimed that the site will not be loaded if he REMOVE this file!!! I don't know whether he tells the truth or not; Because I don't know anything about website programming!

And I have another question! WHY all those 66 anti-virus engines on Virus Total online scanner didn't detect this file as malicious? Is this a new threat detected ONLY BY NORTON?

Kudos0

Re: Unblocking A Website

Your reporting to Norton about a possible false positive is the best you can do for now. I too am not a programmer, so I could not comment on the necessity for that file. 

But do you want to take the chance before getting a response from your false positive submission?  Here is Symantec's write up on PUA.JScoinminer    https://www.symantec.com/security_response/writeup.jsp?docid=2017-091515...

The fact that you submitted that site to virustotal and there were no other detections, is a good indicator that this may be a false positive.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: Unblocking A Website

I already did it 6 days ago!

I also already read that page and ran that software which was introduced and it has found NO malware on my PC! Because of this, I guess that this notification is really a false-positive.

I hope they send me an answer, soon!

Don't you know how I can inform them to send the answer sooner?

Kudos0

Re: Unblocking A Website

I have just submitted a false positive report. Lets see who gets a response first.

EDIT

From my confirmation email...

Submission of incomplete information may result in a delay of the final determination.

It is possible that you may have missed something in your submission that is causing a delay. Time will tell.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: Unblocking A Website

Hello Pitbull2020

I will submit this to the Safe Web Team who handles this.

Please stay tuned to this thread for a response on either Sunday or Monday night after midnight EST.

Have A Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.16.0.247 Core Firmware 267 I E 11
Kudos0

Re: Unblocking A Website

Thank you.

I'm 100% sure that I filled the form completely! I read all sections of form carefully!

Still no response from Norton Team. :(

Kudos0

Re: Unblocking A Website

Hello floplot.

Thank you very much.

I checked the site right now and it's unblocked.

Did you submit the site via this link? https://submit.symantec.com/false_positive/

Kudos0

Re: Unblocking A Website

I did submit the site with the link you gave and got this reply at 6:22 am this morning. floplot has other channels to help with Safe Web issues.

The Norton Safe Web Team has re-evaluated your submission to the block page False Positive site. Our analysts have re-evaluated the issue of the suspected false positive site:4taktaraneh.org.

The result of this re-evaluation is a change in the Norton Safe Web rating for this site.

  • Old Rating: UNSAFE
  • New Rating: SAFE

For details about this site report, you can go to:http://safeweb.norton.com/report/show_mobile?url=4taktaraneh.org

For additional information, please visit: http://safeweb.norton.com/help/site_owners

Regards,
Norton Safe Web Team

So not sure if it was my submission that got it changed or if @floplot's contacts were able to help with the analysis of the site.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: Unblocking A Website

Hello

If it were my contact, the Safe Web Team would have posted in the thread. The False Positive Team has to contact Safe Web to get the information. I can do it directly with Safe Web.  The wording that peterweb quoted is from False Positive. I had mentioned that it was submitted to False Positive. So it was both of us.

Have a Good Night and

Thanks.

EDIT: The important thing is that the site is now marked as Green OK. It really doesn't matter if peterweb was successful or that I was successful in getting it changed. Perhaps it was your own submission. False Positive does have to go through Safe Web, so Safe Web is involved.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.16.0.247 Core Firmware 267 I E 11
Kudos0

Re: Unblocking A Website

Anyway, Thank you very much to you both! You helped me a lot.

Kudos0

Re: Unblocking A Website

Hi Pitbull2020

Your site '4taktaraneh.org' had been submitted for analysis and is currently rated green in safeweb.norton.com.

Cops

Kudos1 Stats

Re: Unblocking A Website

Hi Console_Ops

I know that! The submissions were from me and two other people who you can see their IDs above!

And my question is WHY didn't you check the site when I submitted the form? Was my form incomplete? I don't think so!

I filled the form 2 times in 2 different days and I'm 100% sure that I filled the form completely with full information about the site!

I think Safe Web team checks the forms so so so slow! The reason that I'm telling this, is that I submitted a form at the same time for a false-positive of file detection and the False-Positive team checked it and sent an answer to me in less than a day!!!

Please leave an answer here for me about my question!

Kudos0

Re: Unblocking A Website

Pitbull2020

The Consol_Ops is not one user but a team. They do not get the false positive submissions directly, because the same link can be used for a false positive malware detection. Where ever the FP submissions go, they are triaged and then sent on the the appropriate departments. So Consol_Ops cannot answer any question about your specific submission.

Also, they do not monitor the forums directly. Users here, mostly @floplot, help out by checking that the initial steps have been taken to register the web site with Norton, and if all is ready to be checked, she will contact the Safe Web team through her connections.

We are not employees or affiliated in any way with Norton.

Things happen. Export/Backup your Identity Safe data.
Kudos1 Stats

Re: Unblocking A Website

I knew that he's not a normal user like us, here! Because of this, I asked him that why they didn't respond me!

I know that he can not directly monitor our requests; but my submissions were sent successfully to the Safe Web team department and they didn't answer!

At last, here, floplot and you helped me thru this submission!

I don't think it would be good for a big company like Symantec that every time a site is blocked mistakenly, a topic opens here! They MUST check all submissions to avoid this!

Safe Web team MUST check all submissions ASAP! Just like False-Positive department that I explained about it in the post above!

Kudos0

Re: Unblocking A Website

Hello

Almost correct. Using the False Positive form for websites is what slows down the process. False Positive form is supposed to be used for files that are marked as malicious, but they are not malicious.

If a website is blocked as being malicious when it isn't, then that is supposed to be handled by Safe Web after going thru a process to get the website registered first.

Sending a website to False Positive slows down the process because  False Positive then has to send the website to Safe Web to get the results and then they have to notify False Positive.

Thank you peterweb for your response to Pitbull

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.16.0.247 Core Firmware 267 I E 11
Kudos1 Stats

Re: Unblocking A Website

As I said above, I don't think it would be good for Symantec!

Users should be able to send the mistakenly blocked websites directly to Safe Web team (without need of registering the website)! Because registration of the website can be done ONLY by its administrator as I found out before...

And by the way, in my case, this website's admin didn't accept registering his website! And I had to open this topic in order to get the website unblocked sooner...

Kudos0

Re: Unblocking A Website

Hello Pitbull

Since you are not the owner of the website, I can send the request directly to Safe Web Team. If anyone other than the owner of the website thinks the blockage is incorrect, they just have to post that complaint here and I would have taken care of it. I don't think using False Positive in the case of websites is the proper way of handling it. I'm not a Norton Employee, but that's my understanding. False Positives are used for bad files. It seems to be more direct to send it directly to Safe Web. That's just the way I learned how to handle it. I'm not the one to make up the rules though, so no arguments from me. There isn't currently a form made up for users to directly notify Safe Web that I know of.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.16.0.247 Core Firmware 267 I E 11
Kudos0

Re: Unblocking A Website

Kudos0

Re: Unblocking A Website

Hello bjm

Not being argumentative, but I don't see those choices when I click on the link you gave.. My choices are marked A and yours are C?

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.16.0.247 Core Firmware 267 I E 11
Kudos0

Re: Unblocking A Website

floplot:

Hello bjm

Not being argumentative, but I don't see those choices when I click on the link you gave.. My choices are marked A and yours are C?

Have a Good Night and

Thanks.

try A4 with Next > B5 with Next > C7 with Next > https://submit.symantec.com/antifraud/false_positive.cgi

we have a form ....as to whether the form should be used and as to whether the form works.....is ?

Kudos0

Re: Unblocking A Website

Thank you for your comment, bjm_

I EXACTLY went thru these options and submitted 2 forms already (before creation of this topic).

The interesting thing about this, is that I did NOT receive any response from them UNTIL RIGHT NOW!!!

Kudos0

Re: Unblocking A Website

Pitbull2020:  Thank you for your comment, bjm_

I EXACTLY went thru these options and submitted 2 forms already (before creation of this topic).
The interesting thing about this, is that I did NOT receive any response from them UNTIL RIGHT NOW!!!

we have a form ....as to whether the form should be used and as to whether the form works.....is ?  

This thread is closed from further comment. Please visit the forum to start a new thread.