Going to malicious site...
here is example with hxxp://celebsalon.net/2/1.php [link edited to prohibit accidental clicks; replace hxxp with http]
then in order:
site in opening, .exe malware file is downloading and only than Norton waking up and load it own page content with warning message.
Strange actions order to protect, isn't?)
---
if something new appears - it is not that it is better than old [NIS 2011 comparing NIS 2010]
<<Edit: Message subject edited for clarity>>