Norton Safe Web Saying something interesting....

Status
Not open for further replies.

ddcddc

New Member
Messages
48
Reaction score
0
Points
0
Can someone help me figure out why it is that when I go to my website...

http://ddc.pcriot.com I get this report from Norton Safe Web:

http://safeweb.norton.com/report/show?url=pcriot.com

I initially suspected it was activex in the older versions of dreamweaver and flash I was using..
but norton web safe specifies other reasons.....thanks in advance.



General Info
Web Site Location
us.gif
United States of America

Norton Safe Web has analyzed pcriot.com for safety and security problems. Below is a sample of the threats that were found.
thumb



Threat Report

Total threats found: 3

small-whitebg-red.png
Viruses (what's this?) Threats found: 1
Here is a complete list:
Threat Name: Bloodhound.Exploit.196 Location: http://simplesads.pcriot.com/pdf.php

small-whitebg-red.png
Phishing Attacks (what's this?) Threats found: 2
Here is a complete list:
Location: http://postebpolpostaonlinepoteital.../bancoposta/bpol/cartepre/formslogin.aspx.php Location: http://cgi1signinedbayisapidllm2mcontact.pcriot.com/eBayISAPI.dll.httpwww.ebay.fr/index.php
 

galaxyAbstractor

Community Advocate
Community Support
Messages
5,508
Reaction score
35
Points
48
It seems like there is a page that contains a virus under the domain pcriot. I have suspended that page now, your site does not contain any virus, it's just that norton doesn't check subdomains, it checks the whole domain, and if a threat is found it blocks all sites
 

ddcddc

New Member
Messages
48
Reaction score
0
Points
0
I thought it was something like that....I should have contacted you in private message as to not cause concern. Have you guys contacted Norton about this yet? Seems like something they should fix...or atleast clarify in their reports. That way it wont scare away potential cliients.
 
Last edited:

galaxyAbstractor

Community Advocate
Community Support
Messages
5,508
Reaction score
35
Points
48
I thought it was something like that....I should have contacted you in private message as to not cause concern. Have you guys contacted Norton about this yet? Seems like something they should fix...or atleast clarify in their reports. That way it wont scare away potential cliients.

Well, thing is, it's hard to see if site1.domain.com and site2.domain.com has the same owner or not. If it is same owner, both domains could be infected, if it is different users, it's not as likely.
 

ddcddc

New Member
Messages
48
Reaction score
0
Points
0
I deleted cookies and everything...still getting the same report. I'll talk to norton about it and see what they say. I don't know if this means anything...but it seems odd...when I use a url redirect www.ddc7.here.ws I don't get the warnings from norton safe web.

Thanks for the quick responses by the way!
Edit:
ok, I just chatted with two different people at Norton. As far as I can tell, they are saying that you guys need to submit the following:

Jones: The Web site is an ecommerce site. <=---JONES IS SUPERVISOR AT NORTON

The Web site uses a valid digital certificate issued by
a CA/Browser Forum member.
CA/Browser Forum

The Web site publishes a clear privacy policy.

=================
Jones: If the Web site meets above criteria, send a
request to Norton Safe Web with the following
information:
1. Contact name.
2. Contact phone/email address.
3. Company/Business name.
4. Web site address.
5. Reason(s) for dispute.

Please send above information to :
Jones: site_owner_help_en@symantec.com
web, designer will receive follow up mail regarding
submission.
Edit:
ok this is just weird....apparently the first guy I chatted with was confused...then he tried to follow his script from norton and redirect me to a fee-based service. I already frikkin pay for norton...
so he directed me to a supervisor. And from what I can gather he says YOU guys at x10hosting have to submit information stating the site is clean..or something like that....sigh....

If Norton IS reading your site as unsafe, you may be losing customers....so you might want to submit the info to norton that I provided to you in last post.. .

web hosting service at http://x10hosting.com/ After I uploaded my index.htm and a few other pages to my site:

www.ddc.pcriot.com

I got this message from norton safe web:
http://safeweb.norton.com/report/show?url=pcriot.com

Here is a link to what the forum moderators had to say at the
hosting site:
http://forums.x10hosting.com/free-hosting/110505-norton-safe-web-saying-something-interesting.html

They said the problem was resolved..but it isn't.

Another moderator of the forums was initially saying that my files were infected. But I know this is not the case...just read the report generated by norton safe web to see.
The directories are directories that existed when I first signed up with the hosting service.
The posts of the moderator who made these claims were deleted..then another mod stepped in.

================================

Kiran: Thanks, your case number is , please write this down.
Lee, pcriot.com is a domain controlled by two nameservers at x10hosting.com . They are on different IP networks

=============================
12:08 PM Connecting to Rescue Gateway: logmeinrescue.com...
12:08 PM Connected to Rescue Gateway. A support representative will be with you shortly.
12:08 PM Support session established with Raja B V K.
12:09 PM : Lee :: hello
12:09 PM Raja B V K: I'm now connected to your computer.
12:09 PM Remote Control started by Raja B V K.
12:09 PM : Lee :: ok
12:09 PM Raja B V K: Could you please show me the message?
12:10 PM : Lee C :: ok
12:10 PM : Lee C :: here
12:12 PM Raja B V K: Can I put you on hold for 2 or 3 minutes while I look into this for you?
12:12 PM : Lee C :: take your time
12:12 PM : Lee C :: i just want to figure this out..something doesn't seem right
12:26 PM Raja B V K: Thank you for your patiece, Lee. I apologize for the long hold.
12:27 PM : Lee C :: no worries
12:27 PM Raja B V K: Thank you.
12:27 PM : Lee C :: just making sure you are still there ... windows firewall was on..thought I had it disabled.
12:28 PM Raja B V K: Lee, do you own this Web site?
12:28 PM : Lee C :: which one?
12:29 PM : Lee C :: the hosting web site? No..I just signed up with a hosting service..
12:29 PM Raja B V K: The one which is on your screen?
12:29 PM : Lee C :: thats your site..
12:29 PM : Lee C :: ?
12:29 PM : Lee C :: do u mean this one?
12:29 PM : Lee C :: thats the forums where I was discussing the problem with moderators of the forums..

12:30 PM : Lee C :: do you want to see where the files are?
12:30 PM Raja B V K: Yes Lee.
12:30 PM : Lee C :: ok hold
12:32 PM : Lee C :: this is where you upload web pages and what not.. there were already directories located here when I
signed up
12:33 PM : Lee C :: the files that norton said were infected are located somewhere in here..

12:33 PM : Lee C :: did you read the forum posts from the moderators of the forum?
12:33 PM Raja B V K: Yes I've read that.
12:33 PM : Lee C :: ok
12:35 PM Raja B V K: Lee, do you own the 10 hosting web site?
12:35 PM : Lee C :: no
12:35 PM : Lee C :: just using their free services for web hosting
12:35 PM Raja B V K: Okay.
12:35 PM : Lee C :: im kind of confused as to where there pcriot.com came into play..
12:36 PM : Lee C :: do u want me to load the page i uploaded to their servers?
12:36 PM : Lee C :: here is my page..
12:42 PM Raja B V K: Lee, Norton detected that Pcriot.com has 3 threats.
12:42 PM Raja B V K: But you opened the site 10 hosting right?
12:42 PM : Lee C :: yea?
12:43 PM : Lee C :: i signed up wih x10..I don't remember ever seeing the pcriot link until after I signed up...i must be on
a subdomain on x10 hosted by pcriot? I'm kind of confused to be honest with you.

12:44 PM : Lee C :: ill show you where i found x10 if you wish..I did a search for free hosting services...
12:45 PM : Lee C :: cant find it...
12:46 PM Raja B V K: Lee, do you suspect threat on your pc?
12:47 PM : Lee C :: i really don't know..it's hard to know sometimes isn't it? lol..I'm just wondering why I'm getting the
warning from norton safe web. I did have a few intrusion attempts a few weeks ago...
12:47 PM : Lee C :: want to see the logs?
12:48 PM Raja B V K: That would be fine.
12:49 PM : Lee C :: any day now.. lol
12:50 PM : Lee C :: but these attacks were long before I signed up with this site...so I don't think it's related
12:50 PM Raja B V K: Okay.
12:51 PM : Lee C :: it isn't loading for some reason...
12:52 PM : Lee C :: shrug
12:52 PM : Lee C :: norton said it took care of the problem..
12:52 PM : Lee C :: for the attack a few weeks ago
12:52 PM Raja B V K: We will close and open again.
12:59 PM Raja B V K: Lee, pcriot.com is a domain controlled by two nameservers at x10hosting.com . They are on different IP
networks
12:59 PM : Lee C :: ok...
1:00 PM : Lee C :: what does that mean?
1:00 PM : Lee C :: i know when I typed in pcriot.com they did't have a web page...

1:00 PM Raja B V K: Okay.
1:01 PM : Lee C :: the mod at the forums for x10 said that there WAS a user found who had a virus and what not on their
page..and that there account was suspended...
1:02 PM Raja B V K: From looking at your computer it appears that your computer may be infected by a virus. To help you with
removing this virus off your computer what I can do for you is to transfer you across to our fee-based virus removal
specialist team. Would this be ok with you?
1:02 PM : Lee C :: so pcriot is a part of x10?
1:02 PM : Lee C :: sure
1:02 PM Raja B V K: Okay.
1:02 PM : Lee C :: how can you tell my pc infected?
1:03 PM Raja B V K: Please give me 2 minutes while I'll transfer you to that team?
1:03 PM : Lee C :: ok

1:04 PM : Lee C :: fee based??
1:04 PM Raja B V K: Yes Lee.
1:04 PM : Lee C :: i already pay for norton..
1:05 PM : Lee C :: I can't afford to pay for anything right now....norton scans my computer and says i don't have a
virus..... where did you see that my computer is infected with a virus..

1:06 PM : Lee C :: why should I pay more when it's nortons responsibilty to protect my pc?
1:06 PM Raja B V K: Lee, if a web site is redirected then it is only because of Virus.
1:06 PM : Lee C :: is that in the contract somewhere?
1:07 PM : Lee C :: please show me where it says that if I get a virus I have to pay extra to have it removed..
1:07 PM : Lee C :: did you find out for sure that it's being redirected?


====================================
Jones: Lee , your case number is , please write this down.
 
Last edited:
Status
Not open for further replies.
Top