Originally Posted By: jchuzi
I downloaded it here.

That link goes to transcend-info.com. You can do a whois lookup in many places online. Here's part of the record:
Code:
Domain Name: TRANSCEND-INFO.COM
Registry Domain ID: 1630265877_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois-generic.marcaria.com
Registrar URL: www.marcaria.com
Updated Date: 2015-11-09T15:28:50Z
Creation Date: 2010-12-14T16:01:54Z
Registrar Registration Expiration Date: 2024-12-14T16:01:54Z
Registrar: Marcaria.com International, Inc.
Registrar IANA ID: 1086
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: 
Registrant Name: Julie Liu
Registrant Organization: Transcend Information, Inc.
Registrant Street: 70, XingZhong Rd., NeiHu Dist., Taipei, Taiwan, R. O. C. 
Registrant City: Taipei
Registrant State/Province: Taiwan
Registrant Postal Code: 114
Registrant Country: TW
Registrant Phone: +886.227928000
Registrant Phone Ext: 
Registrant Fax: +886.227968017
Registrant Fax Ext: 
Registrant Email: julie_liu@transcend-info.com
Registry Admin ID: 
Admin Name: Julie Liu
Admin Organization: Transcend Information, Inc.
Admin Street: 70, XingZhong Rd., NeiHu Dist., Taipei, Taiwan, R. O. C. 
Admin City: Taipei
Admin State/Province: Taiwan
Admin Postal Code: 114
Admin Country: TW
Admin Phone: +886.227928000
Admin Phone Ext: 
Admin Fax: +886.227968017
Admin Fax Ext: 
Admin Email: julie_liu@transcend-info.com


So it looks pretty legit to me. Remember that just because it's not signed doesn't mean it's unsafe. (and occasionally the exact opposite is also true)

Most of the malware download links I see (and I do tend to at least slightly investigate them all) tend to be stored on hacked web servers. (many of them, unsurprisingly, being wordpress)

So on the other hand you might have seen a URL more like this:

http://flowershop.berlin.de/wordpress/uploads/9823jd76mnd/transcend.html

ok, that is almost certainly malware of some sort or other - virus, phish, nothing good.

But once you go down the road of following up on things like this you have to pay attention to what you're doing. For example, the link may appear like "http://www.transcend.com/downloads/usbdriverpkg.zip", but that's just arbitrary text. It could say "click here to download", but it HAPPENS to look like a url. So you could click on that and find yourself at the flower shop in germany. Don't blindly click on links that appear safe by their description alone. Ctrl-click, and Copy Link. Open a new browser window, and paste it into the address bar and LOOK at it before hitting Enter. Remember that domain name prefixes and anything in the path are arbitrary and can be customized to look more authentic. They WILL do this from time to time, and it should set off just as many alarms in your head:

http://www.transcend.com.berlin.de/drivers/transcend.html

(in the above example, only ".berlin.de" is a reliable indicator of where you are going)

I work for the Department of Redundancy Department