Has CNET download sit been comprised?

[Kim Wilson]

I have downloaded LavaSoft Ad-ware, Spybot and Belarc-Advisor from the CNET
download site. In all cases, I started to get notices of attempted
communications right after they were installed and before they were run.
One computer had NIS 2008, and right after the download, reported
Trojan.Zonebac, Spyware.Spector and Spyware.Eblaster. These were never
detected or tried communicating until Ad-ware, Spybot and Belarc-Advisor
were loaded and installed. Though the trojans and what it is finding is
different, installing on other computers have had the same results of
instantly seeing stopped communications and trojans. Thoughts?

Here are the links that were used:

Spybot
http://www.safer-networking.net/en/download/index.html

http://www.download.com/3000-8022_4-10743107.html

Ad-Aware .

http://www.lavasoft.de/products/ad_aware_free.php

http://www.download.com/3000-8022_4-10747652.html

Belarc-Advisor

http://www.download.com/Belarc-Advisor/3000-2094_4-10716621.html?tag=lst-0-1

 

[Patrick Keenan]

I have downloaded LavaSoft Ad-ware, Spybot and Belarc-Advisor from the CNET
download site. In all cases, I started to get notices of attempted
communications right after they were installed and before they were run.
One computer had NIS 2008, and right after the download, reported
Trojan.Zonebac, Spyware.Spector and Spyware.Eblaster. These were never
detected or tried communicating until Ad-ware, Spybot and Belarc-Advisor
were loaded and installed. Though the trojans and what it is finding is
different, installing on other computers have had the same results of
instantly seeing stopped communications and trojans. Thoughts?

If you think those sites are compromised, you need to tell *them*.

HTH
-pk