Norton tags sabnzb.exe as a virus / threat

Report & discuss bugs found in SABnzbd
Forum rules
Help us help you:
  • Are you using the latest stable version of SABnzbd? Downloads page.
  • Tell us what system you run SABnzbd on.
  • Adhere to the forum rules.
  • Do you experience problems during downloading?
    Check your connection in Status and Interface settings window.
    Use Test Server in Config > Servers.
    We will probably ask you to do a test using only basic settings.
  • Do you experience problems during repair or unpacking?
    Enable +Debug logging in the Status and Interface settings window and share the relevant parts of the log here using [ code ] sections.
Post Reply
naartjie
Newbie
Newbie
Posts: 4
Joined: June 18th, 2011, 7:53 am

Norton tags sabnzb.exe as a virus / threat

Post by naartjie »

Version: (0.6.5)
OS: (Windows 7 64-bit)
Install-type: (Windows Installer)
Firewall Software: (Norton Internet Security)
Are you using IPV6? (no)
Is the issue reproducible? (yes)

Trying to install 0.6.5, when I go to the source forge page and try to download (http://sourceforge.net/projects/sabnzbd ... e/download), Norton says 'Malicious Web Site Blocked'.  If I bypass this and install 0.6.5, Norton tags the sabnzd.exe as a threat and quarantines it.  I could set it not to do any of this but it's a bit disconcerting.

Perhaps it's not a bug... but it is concerning.  Just thought I'd let you know and to find out if any other Windows users are getting this?
In the meantime, I'm reverting back to 0.6.2.
User avatar
shypike
Administrator
Administrator
Posts: 19773
Joined: January 18th, 2008, 12:49 pm

Re: Norton tags sabnzb.exe as a virus / threat

Post by shypike »

Norton occasionally needs to show that it's mad.
How much sense does it make to declare the whole of SourceForge.net a malicious site?
What happens if you download another program from SourceForge?
naartjie
Newbie
Newbie
Posts: 4
Joined: June 18th, 2011, 7:53 am

Re: Norton tags sabnzb.exe as a virus / threat

Post by naartjie »

It doesn't report the whole of source forge as a threat, just the file download link... and then also the sabnzbd.exe if you download and install it.  I guess it's a false positive from Norton's side then.  But I thought I should post here, just in case something happened to get into the Windows installer.
User avatar
shypike
Administrator
Administrator
Posts: 19773
Joined: January 18th, 2008, 12:49 pm

Re: Norton tags sabnzb.exe as a virus / threat

Post by shypike »

What happens if you download the older versions?
I don't have Norton (I'd rather have a root canal) to try.
naartjie
Newbie
Newbie
Posts: 4
Joined: June 18th, 2011, 7:53 am

Re: Norton tags sabnzb.exe as a virus / threat

Post by naartjie »

I tried 0.6.4, 0.6.3 and 0.6.2 and they all say the same, eg:

Malicious Web Site Blocked
You attempted to access:
http://tenet.dl.sourceforge.net/project ... 32-bin.zip
This is a known malicious web site. It is recommended that you do NOT visit this site. The detailed report explains the security risks on this site.
For your protection, this web site has been blocked. Visit Symantec to learn more about phishing and internet security.

I'm just going to ignore it for now.
I downloaded 0.6.2 some time ago, and there weren't any such warnings.  I assume Norton is incorrect.  I'm trying to notify / ask them why they think it's malicious, I'll let you know if I get a response.
naartjie
Newbie
Newbie
Posts: 4
Joined: June 18th, 2011, 7:53 am

Re: Norton tags sabnzb.exe as a virus / threat

Post by naartjie »

It seems that http://tenet.dl.sourceforge.net/ is a compromised site... ie. A project at project/ophcrack/ophcrack/3.3.1/ophcrack-win32-installer-3.3.1.exe, on that server, has a trojan.gen 'threat'.  This apparently makes the whole site a threat.  I guess it makes sense if a server has a virus that all files on the server are considered dangerous?  Anyway, I've notified SourceForge about it.
Post Reply