285733 - Detect an emergent program in my page

Status: VERIFIED INVALID

(Toolkit :: Downloads API, defect)

Description

[info]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-AR; rv:1.7.6) Gecko/20050226 Firefox/1.0.1

Sorry for my english.

The firefox program, detect and cgi ".exe" call in my page, as an emergent 
program, and donwload it without any aditional options. This mistake, causes 
that google, treat my site as an ilegal for non comertial ethics practicals, 
and confuse my site as an Game on line site, but is an bussines opportunities 
site, and Small bussines offerement. Please I need an ansewer, to try to 
google's people belive in me.
-----------------
In Spanish, better explained
El programa Firefox, detecta un cgi ".exe" que es llamado en mi página web, 
como un programa emergente, e intenta hacer una operación de download, sin 
ningúna otra alternativa. Este error, causa que la gente de google.com.ar, 
trate a mi sitio como ilegal, por no realizar prácticas comerciales eticas 
apropiadas. Necesito una respuetas, a fin de poder enviársela a la gente de 
google para que crean en mi palabra y vean que mi sitio no es un sitio de 
juegos en linea sino que es un sitio que ofrece una oportunidad de negocios, un 
microemprendimiento.

Best regards
Silvio Favero
webmaster - Trabaje desde su Casa
[e-mail]




Reproducible: Always

Steps to Reproduce:
1. When acceso to www.trabaje.net/google/
2.
3.

Actual Results:  
Bring up window download confirmation.

Expected Results:  
Download it

No crash ID reported. seem an wrong criterial program practish.

Comment 1

[Elmar Ludwig]

I don't speak Spanish, so I'm not 100% sure I understand you correctly, but:

<http://www.trabaje.net/google/> contains a FRAMESET that displays correctly.
This frameset loads the URL <http://209.13.125.12/cgi-bin/cargaindex.exe?google>,
which is advertised as 'Content-Type: application/octet-stream' by the web
server. Full HTTP server headers as show by wget program:

--14:12:53--  http://209.13.125.12/cgi-bin/cargaindex.exe?google
Resolving 209.13.125.12... 209.13.125.12
Connecting to 209.13.125.12:80... connected.
HTTP request sent, awaiting response... 
  HTTP/1.1 200 OK
  Server: Microsoft-IIS/4.0
  Date: Fri, 11 Mar 2005 13:15:24 GMT
  Content-Type: application/octet-stream
  .\data\google\counter.cntoooopsContent-type: text/html
Length: unspecified [application/octet-stream]

14:12:54 (20.12 KB/s) - `cargaindex.exe?google' saved [6,940]

Note that there is a somewhat garbled second 'Content-type:' header, which
might indicate some kind of misconfiguration or error on your side.

This is definitely a problem on the server side, not a bug in Firefox.

-> marking as INVALID

Comment 2

[Jo Hermans]

You're not using a link to download the executable, it's loaded by a frame in
the main page (also in <www.trabaje.net>). You shouldn't do that. An
unsuspecting user that goes to your website will immediately receive the
download without any option at all. I got a dialog asking if I would save the
document. My first reaction when this happens would be to cancel the download
and never go back to that website. But the document was already downloaded in
the /temp folder (see bug 266325), so could trigger an anti-virus scanner !

Looks similar to bug 266325, although that's about an IFRAME. And it's a trojan.
You're using exactly the same technique, no wonder Google tries to block it.