User avatar
Doctorwho8
Posts: 54
Joined: Mon Dec 31, 2012 11:00 pm
Location: Astoria NY
Contact: Website

Symantec's Norton Safe Web thinks there is something wrong o

Mon May 20, 2013 3:57 am

Hello!
(I also sent that to the [email protected] alias.)
On this computer I run Norton Anti-Virus, it installed their Safe Web
product. (It works most of the time.) It reported a problem with this
particular portion of the site:
http://www.raspberrypi.org/quick-start-guide.

Norton is calling it, NetCat. Not the program that is useful on Linux
and even Cygwin for sending things around a network, but I surmise
something that can be abused. According to Norton it originated from
this location: http://joncraton.org/media/files/nc111nt.zip .

And they (Norton) claim it will effect all computers running Windows
from the period including the latter part of 20C to the period before
Vista.

I'm not worried. But I believe a lot of users might be. I suggest
someone should take the time to clean that portion of the site.

Although when trying to scan my system for potential viruses when I do have Cygwin installed it frequently does some darned silly things concerning the program by that name installed there. So what you have might be a false alarm. I suggest that someone should check on that.
-------------------
Gregg
Doctor Who8

SeanD
Posts: 121
Joined: Wed Sep 21, 2011 12:25 am
Contact: Website

Re: Symantec's Norton Safe Web thinks there is something wro

Mon May 20, 2013 4:56 am

Confirmed

Following this link http://safeweb.norton.com/report/show?n ... errypi.org

Norton Safe Web reports a low risk threat from NetCat http://www.symantec.com/security_respon ... 4294906932

The specific zip file linked above is showing positive for the NetCat infection (and unknown viruses) from a range of signature based AV scans. There is some debate as to whether NetCat is actually a virus or not (there are safe and not so safe versions) and Jon Craton is the author of a supposedly safe version. What I do not understand is the link between this site and a zip file on his.

User avatar
fbutler
Posts: 302
Joined: Thu Mar 15, 2012 4:09 pm
Location: Surrey, England

Re: Symantec's Norton Safe Web thinks there is something wro

Mon May 20, 2013 7:02 am

Norton Mobile Security is also flagging an issue:
"Malicious Web Site Blocked http://www.raspberrypi.org"
"This is a known malicious web site. It is recommended that you do NOT visit this site"

User avatar
Doctorwho8
Posts: 54
Joined: Mon Dec 31, 2012 11:00 pm
Location: Astoria NY
Contact: Website

Re: Symantec's Norton Safe Web thinks there is something wro

Mon May 20, 2013 3:35 pm

fbutler wrote:Norton Mobile Security is also flagging an issue:
"Malicious Web Site Blocked http://www.raspberrypi.org"
"This is a known malicious web site. It is recommended that you do NOT visit this site"
Hello!
That's just your application being rude. It's possible to train it to not react badly to such sites.
-------------------
Gregg
Doctor Who8

jamesh
Raspberry Pi Engineer & Forum Moderator
Raspberry Pi Engineer & Forum Moderator
Posts: 22660
Joined: Sat Jul 30, 2011 7:41 pm

Re: Symantec's Norton Safe Web thinks there is something wro

Mon May 20, 2013 3:45 pm

Weird - that page doesn't have any reference to the NetCat thing, or indeed to any linked zip file that I can see.

I'll email the boss.
Principal Software Engineer at Raspberry Pi (Trading) Ltd.
Contrary to popular belief, humorous signatures are allowed. Here's an example...
"My grief counseller just died, luckily, he was so good, I didn't care."

User avatar
fbutler
Posts: 302
Joined: Thu Mar 15, 2012 4:09 pm
Location: Surrey, England

Re: Symantec's Norton Safe Web thinks there is something wro

Mon May 20, 2013 3:47 pm

Doctorwho8 wrote:
fbutler wrote:Norton Mobile Security is also flagging an issue:
"Malicious Web Site Blocked http://www.raspberrypi.org"
"This is a known malicious web site. It is recommended that you do NOT visit this site"
Hello!
That's just your application being rude. It's possible to train it to not react badly to such sites.
It's working OK now which suggests Norton have un-flagged it from being classified as malicious

gritz
Posts: 449
Joined: Sat Jan 28, 2012 2:33 am

Re: Symantec's Norton Safe Web thinks there is something wro

Mon May 20, 2013 6:05 pm

fbutler wrote:
Doctorwho8 wrote:
fbutler wrote:Norton Mobile Security is also flagging an issue:
"Malicious Web Site Blocked http://www.raspberrypi.org"
"This is a known malicious web site. It is recommended that you do NOT visit this site"
Hello!
That's just your application being rude. It's possible to train it to not react badly to such sites.
It's working OK now which suggests Norton have un-flagged it from being classified as malicious
Malwarebytes calls it a "potentially unwanted program" rather than an explicit threat. The oddest thing is that Norton found it to be somehow linked to the Pi page.

User avatar
fbutler
Posts: 302
Joined: Thu Mar 15, 2012 4:09 pm
Location: Surrey, England

Re: Symantec's Norton Safe Web thinks there is something wro

Mon May 20, 2013 6:12 pm

gritz wrote:Malwarebytes calls it a "potentially unwanted program" rather than an explicit threat. The oddest thing is that Norton found it to be somehow linked to the Pi page.
I wonder if it could be because there was a link to the download page the zip file for it in the camera announcement?
http://www.raspberrypi.org/archives/3890


gritz
Posts: 449
Joined: Sat Jan 28, 2012 2:33 am

Re: Symantec's Norton Safe Web thinks there is something wro

Mon May 20, 2013 9:20 pm

fbutler wrote:
gritz wrote:Malwarebytes calls it a "potentially unwanted program" rather than an explicit threat. The oddest thing is that Norton found it to be somehow linked to the Pi page.
I wonder if it could be because there was a link to the download page the zip file for it in the camera announcement?
http://www.raspberrypi.org/archives/3890
Ahhhhhhh, good spot, fbutler. All's well that ends well then.

Return to “General discussion”