Google Safe Browsing and NSIS (Nullsoft Scriptable Install System) Installer files

35 views
Skip to first unread message

Tom Miller

unread,
Mar 15, 2018, 12:39:31 PM3/15/18
to Google Safe Browsing API
Hello Google,
my website www.heikoplate.de has been considered dangerous by Google Safe Browsing since the end of February 2018.
The definitive reason could not be communicated to me. However, I had a certain suspicion.

The site contains local links to zipped installation files for self-created programs released by the freeware NSIS
 
http://nsis.sourceforge.net/Main_Page

be generated by virus-free modules. These zip files are marked as malware by some antivirus programs called by VirusTotal.com. Despite repeated call of the website and installation of the programs my Windows system was always clean afterwards. I have never received any complaints from my users.

That was an indication for me that I have now replaced all the NSIS setup files with the tool "Advanced Installer" by Windows Installer Files (.msi).

Result: Google now reports that the website is clean.

So Google Safe Browsing did not study the NSIS setup files intensively enough for malware, but it's probably just a data structure that could point to real viruses.
Heiko Plate.
Reply all
Reply to author
Forward
Message has been deleted
Message has been deleted
0 new messages