Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





 
Welcome Guest!
Welcome to the Promo2day Community, where we feature software giveaways, computer discussion, along with a fun, safe atmosphere! If your reading this it means you are not yet registered. You will need to Register before you can make posts, chat or enter the forum giveaways. Be sure to also visit the Help/FAQ page.

  The Creators Update is projected to go live on April 11
Posted by: mrtrout - 04-02-2017 , 02:02 AM - Forum: General Computer Chat - Replies (2)

http://news.softpedia.com/news/get-to-kn...4465.shtml    Get to Know the Windows 10 Creators Update with These 150 Screenshots

The Creators Update is projected to go live on April 11
Apr 1, 2017 05:18 GMT  ·  By Bogdan Popa Microsoft will launch the Windows 10 Creators Update on April 11 as the next big update for its most recent operating system, after the Anniversary Update whose rollout started on August 2 last year. 

Just like it was the case of the Anniversary Update, the new Creators Update will launch in stages for Windows 10 users, and this means that not everyone will receive it on day 1, but gradually as the company wants to make sure that no issues are experienced whatsoever.

On the other hand, alternative download methods will be provided, including the Windows 10 Update Assistant that takes care of everything by scanning the computer for potential issues and downloading the final bits of the Creators Update before launching the installer.

Internally codenamed Redstone 2, the Windows 10 Creators Update is bringing lots of new features to PC users, including not only new features, but also app updates and changes based on customer feedback.

The 150-picture gallery 
Microsoft Edge is one particular app getting improved, and in addition to features such as pinning tabs aside and more extensions, the browser is also benefiting from new security tools, such as click-to-run for Flash content you come across online.

Windows Defender is evolving to Windows Defender Security Center to group all security features in the OS, while the new blue light filter is there to make sure that you can continue working on the PC during the night by reducing the amount of blue generated by your monitor.

The Creators Update is undoubtedly worth installing, and the huge photo gallery below is supposed to help you get to know the new OS version before you actually proceed with the deployment. There might be other new features that we didn’t get to include in the gallery, but the 150 pics should be enough to help you get an idea of what’s to come in this update.

In the meantime, if you want to try out the Creators Update yourself before it goes live via Windows Update, you can download the preview builds that were released to insiders. Build 15063 is RTM and comes with the same features as the one you’ll get April 11.

Print this item

  CintaNotes (1 Lifetime and 9 Regular Licenses)
Posted by: tarekma7 - 04-01-2017 , 11:37 PM - Forum: Expired Giveaways - Replies (53)

[Image: tag_sidebar2.png]                                                              

A windows notes app for organizing your thoughts and ideas. Take notes from anywhere and automatically organize  them with CintaNotes, a simple notes app for Windows.

Homepage:

http://cintanotes.com/

Download:
http://cintanotes.com/files/CintaNotes_3_6_Setup.exe
 
Portable version:
http://cintanotes.com/files/CintaNotes_3_6.zip

Current version:  3.6

Release date:

March 23rd, 2017

Features:

[Image: 99Kjklw.png]

Text Clipping
Full-text Search
Notes Backup
Configurable Hot Keys   

[Image: TnpA39n.png]
                                                                                                                                  
Notebooks can be divided into sections
Multiple Notebooks  
File Attachments
Hierarchical Tags                                                                   
Autotagging Rules                                                                   
Password Protection
Notes Synchronization on multiple devices
Embedded Links to Other Notes
Export Notes to HTML                                                                                                                           


What are the new features in this version?

Features:

Parse HTML for links and basic formatting upon clipping

New Options/Clipping/Formatting submenu

Support pasting of HTML into notes list and note editor

Enhancements:

Note links: open another notebook’s note if it exists in opened notebook

Make scrollbars clickable when window is maximized and mouse is at the rightmost edge

Fixes:

Export: XML not created when previous directory is removed

Note links: keyboard shortcuts didn’t work in Russian

HTML export: regression – no spacing between paragraphs

Editor: tab indents not lining up correctly

Drag and drop: block keyboard while drag

Editor: unwanted keyboard layout change upon paste

Notes list: weird selection behavior when selection.followedited = 0

About dialog: missing licensee info

Simplenote sync: sync could fail because of certificate security error

Clipping was not always working in IE9+

Purchase:

http://cintanotes.com/pricing/

[Image: KUoSKNtl.png]

Read the full review HERE
.
I would like to thank CintaNotes team for sponsoring this giveaway exclusive for our users.

Giveaway details:

Number of licenses: 10

Validity of licenses: 1 Lifetime + 9 Regular licenses

Duration of the giveaway: 2 Weeks

Winner selection:  Random.org

Giveaway Rules:

Answer these two questions to have a chance to win:

What are your favorite features in CintaNotes?
What are the new features you would like to see based on using the program?

Reply with your answer and share link on any social media or other forum

Good luck for all!

For those who don't win we can give a 25% discount coupon valid for 1 month

Print this item

  WIN A KIDS’ TABLET AND 2 YEAR PUREVPN SUBSCRIPTION
Posted by: noma.jo21 - 04-01-2017 , 07:23 PM - Forum: External Giveaways/Contests - Replies (1)

WIN A KIDS’ TABLET AND 2 YEAR PUREVPN SUBSCRIPTION
To enter, start by leaving a comment on this post telling me what steps you take to protect your kids’ safety and privacy online. Register the comment in the Rafflecopter widget below to make it count and in the process you’ll unlock some bonus entries. Do as many of these as you can to maximise your chances of winning.

The competition closes at 11.59pm on Friday April 14th and is open to UK residents only.
Good luck!
[Image: tGPKXTXl.jpg]


http://slummysinglemummy.com/2017/03/31/...scription/

Print this item

  NordVPN 6 Month Free Give-Away!
Posted by: noma.jo21 - 04-01-2017 , 07:19 PM - Forum: External Giveaways/Contests - No Replies

NordVPN 6 Month Free Give-Away!
This contest is going to take place over Twitter. The rules are as follows:

  1. Retweet the tweet with the contest rules, which can be found here

  2. Post your favourite article from thetinhat.com on Twitter and tag @The_Tin_Hat

  3. Tweet why you think people should use a VPN with the hashtag #GetNordVPN
The contest will run from March 27th to April 27th (one month). The winners will be chosen at random (although trolls will be vetoed).
Good luck!

https://thetinhat.com/blog/else/nordvpn-giveaway.html

Print this item

  LATEST INTERNET DOWNLOAD MANAGER (IDM) GIVEAWAY
Posted by: noma.jo21 - 04-01-2017 , 06:57 PM - Forum: External Giveaways/Contests - Replies (12)

LATEST INTERNET DOWNLOAD MANAGER (IDM) GIVEAWAY
[Image: jWfONNBl.jpg]

http://www.tech2blog.com/latest-internet...-giveaway/

Print this item

  Bandizip 6.02 & Portable Version Released
Posted by: mrtrout - 04-01-2017 , 06:04 PM - Forum: Freeware - No Replies

http://www.bandisoft.com/bandizip/history/    Bandizip version history

6.02 April 1, 2017 New: Show folder's Compressed/Original size New 'Adding files directly to a ZIP file by drag and drop in Explorer' optionFixed: Very slow opening speed under certain conditionsMinor bugs fixed :  http://www.bandisoft.com/bandizip/    Bandizip : All-In-One Free Zip Archiver
Bandizip is a lightweight, fast and free All-In-One Zip Archiver.
Bandizip has a very fast Zip algorithm for compression & extraction with Fast Drag and Drop, High Speed Archiving, and Multi-core compression. It handles the most popular compression formats, including Zip, 7z, Rar, and so on.
Bandizip - Unicode supporting Zip file
› Operating system : Windows Vista/7/8/10
› License : Freeware (No Adware/Spyware/Virus), EULA
› Download : Bandizip 6.02 - April 1, 2017 (History)
 Download Bandizip   Features »More
Compression and Extraction: 
Zip(z01), ZipX(zx01), TAR, TGZ, LZH, ISO, 7Z(7z.001), GZ, XZ and EXE(e01).
Extraction Only: 
RAR(part1.rar, r01), ACE, AES, ALZ, APK, ARJ, BH, BIN, BZ, BZ2, CAB, EGG, GZ, J2J, JAR, IMG, IPA, ISZ, LHA, LZMA, LZ, PMA, TBZ, TBZ2, TGZ, TLZ, TXZ, UDF, WAR, WIM, XPI, XZ, ZPAQ, and Z.
Support for Unicode to display international characters.
Bypass files that don't compress well using the "High Speed Archiving" function.
Extract files to the destination folder directly using the "Fast Drag & Drop" function.
Create self-extracting files (.EXE) and multi-volume (split) archives.
Optional archive encryption using ZipCrypto and AES 256.
Context Menu access including the "Preview Archive" function.
Create or extract multiple zip files simultaneously from windows explorer.
Free to use at both home and in the office. :  https://www.virustotal.com/en/file/b1987.../analysis/  SHA256: b1987c24fc8020eb63ca84a9f2378fd1a66d6de5320bfdf9b8e0291e68540924
File name: BANDIZIP-SETUP.EXE
Detection ratio: 0 / 61
Analysis date: 2017-04-01 14:46:02 UTC ( 2 hours, 3 minutes ago ) Copyright© 2011-2017, Bandisoft.com, All rights reserved.
File version 6.02
Description Bandizip 6.02 Setup
Signature verification  Signed file, verified signature
Signing date 6:18 AM 4/1/2017
Signers
[+] Bandisoft
[+] Symantec Class 3 SHA256 Code Signing CA
[+] VeriSign
Counter signers
[+] Symantec Time Stamping Services Signer - G4
[+] Symantec Time Stamping Services CA - G2
[+] Thawte Timestamping CA
 Packers identified
F-PROT 7Z  VirusTotal metadata
First submission 2017-04-01 07:49:09 UTC ( 9 hours ago )
Last submission 2017-04-01 14:46:02 UTC ( 2 hours, 3 minutes ago )
File names BANDIZIP-SETUP.exe
BANDIZIP-SETUP.EXE:  https://www.virustotal.com/en/file/df64d.../analysis/  SHA256: df64de7cdd24d1fa8922687fe4f8f58bfdc1aca081e3acafd786db544d6dd1d7
File name: BANDIZIP-PORTABLE-GL-64BIT.ZIP
Detection ratio: 0 / 58
Analysis date: 2017-04-01 14:27:25 UTC ( 2 hours, 23 minutes ago )VirusTotal metadata
First submission 2017-04-01 08:58:14 UTC ( 7 hours, 52 minutes ago )
Last submission 2017-04-01 14:27:25 UTC ( 2 hours, 23 minutes ago )
File names BANDIZIP-PORTABLE-GL-64BIT.ZIP

Print this item

  This girl is my hero!
Posted by: Mike - 04-01-2017 , 05:34 PM - Forum: Photo Albums, Images, & Videos - Replies (1)



This girl may be too young to compete on "American Ninja Warrior" but that didn't stop her!

Print this item

  DoYourData Uninstaller Pro 3.0 Free for 72 hours
Posted by: Mike - 04-01-2017 , 02:11 PM - Forum: Expired Giveaways - Replies (2)

[Image: uninstaller-200-200.png]



DoYourData Uninstaller Pro is a smart uninstaller. This PC uninstaller can help Windows users to easily uninstall unwanted programs one by one or in batches. It will completely uninstall selected programs and clean up all leftovers including logs, junk files, registry files, logs, caches, etc. It also can help in easily and completely uninstalling useless plug-ins, games, Windows apps, etc.

 
Installing programs or plug-ins is very easy for Windows users. However, over many useless programs and apps will take much precious disk space of the hard drive and slow the speed of the PC. In order to remove unwanted programs and regain the disk space, DoYourData Uninstaller offers an intelligent solution to uninstall programs and clean up all leftovers. It also can thoroughly uninstall useless Windows apps, plug-ins and games, etc. DoYourData Uninstaller will deeply scan the hard drive and find all leftovers. So it can help PC users to regain the full storage of the uninstalled programs.
 
DoYourData Uninstaller is very easy-to-use. Users only need to select the programs to uninstall. This smart uninstaller will do all the rest things automatically. It is fully compatible with Windows XP, 2000, 7, Vista, 8/8.1 and Windows 10. It is 100% clean and safe.




[Image: f8d9Olhl.png]





Thanks to DoYourData sales we are able to giveaway DoYourData Uninstaller Pro 3.0 (worth $14.99) to all our readers of Promo2day as a time-limited giveaway for 72 hours.

Just download and use the license code posted to activate it to a lifetime pro version. HERE

Print this item

  ConvertXtoDVD 7 license contest
Posted by: Jeanjean - 04-01-2017 , 12:30 PM - Forum: External Giveaways/Freebies - Replies (7)

"Win one of 10 licenses by answering that simple question:
In 2004, we first released what is now ConvertXtoDVD under another name, which one was it:
A: VSO DivXConverter
B: ConvertAllMyDVDs
C: DivXtoDVD
Send your answer (A, B or C) with the form below by April, 6th!
We’ll handpick 10 winners (you’ll be able to choose between a ConvertXtoDVD 7 or ConvertXtoHD 3 license or update)"


Good luck to you all!

http://blog.vso-software.fr/convertxtodvd7/

Print this item

  Leawo DVD Copy
Posted by: asus73 - 04-01-2017 , 10:04 AM - Forum: BitsDuJour Giveaways - Replies (5)

[Image: leawo-dvd-copy.png]


Looking for the best way to make a backup copy of a DVD? Worried that you’ll lose your most valued movies to some physical damage? Copy those DVDs to your computer, or make additional copies on DVD discs, using today’s discount software promotion, Leawo DVD Copy!

Leawo DVD Copy lets you copy DVD movies to your computer or to another DVD disc. With Leawo DVD Copy, you’ll never have to worry about losing your only copy of a DVD movie to physical damage or loss. In just one click, Leawo DVD Copy makes a backup copy of your DVD to another disc, or to a DVD folder or ISO image file on your hard drive, all without compromising the fidelity of the original video or audio!

Flexibility is the name of the game with Leawo DVD Copy, which supports copying from DVD-9 to DVD-9, or from DVD-5 to DVD-5. You can even use Leawo DVD Copy to compress a DVD-9 movie to a DVD-5 disc! No matter what you choose, Leawo DVD Copy lets you copy the full disc, only the main movie, or something in between using Custom Mode. Best of all, your converted content is region-free!

Please note folks: Leawo DVD Copy has been merged into Prof. Media. This means the program you will see is Prof. Media but the license code you will receive, can only be used to activate the Leawo DVD Copy module.

After you purchase Leawo DVD Copy, it may be used for 12 months.



http://www.bitsdujour.com/software/leawo...deals-home

Print this item

  Fast Resize (Win & Mac)
Posted by: asus73 - 04-01-2017 , 10:02 AM - Forum: Giveaway of the day - Replies (6)

[Image: fd6574e255ad0a27864f7843db4c0efc.png]


There are many tools and ways to scale down images. Fast Resize can do all this at least two steps quicker than most other programs.
Simply drag a few images or even an entire folder containing many images onto the program icon and the folder containing the resized images will open automatically.
After that you could easily drag your images onto an email client. Scaling your images with Fast Resizes default settings will easily allow you to send up to 20 of these images in one email with most service providers.





https://www.giveawayoftheday.com/fast-resize-1-0-2/

Print this item

  Kaspersky Small Office Security 2
Posted by: deathsmear - 04-01-2017 , 06:27 AM - Forum: Personal Giveaways - Replies (28)

Kaspersky Small Office Security 2 Personal Computer & File Server
 
24 key-each key 90 days
6 winners ;each one 4 keys [1 year]

Rules

1-just reply here.

2-giveaway end 4 April 2017.

3-winner selection by random.org 

4-one reply per user but :

who reply in 1/4/17 one reply  = 4 entries
who reply in 2/4/17 one reply = 3 entries
who reply in 3/4/17 one reply = 2 entries
who reply in 4/4/17 one reply = 1 entry

winners will be announced on 5 April 2017 ,and will receive keys by PM immediately.

Good luck

Print this item

  Cyber-Attack on McDonald’s Canada Career Website
Posted by: mrtrout - 04-01-2017 , 03:55 AM - Forum: Security News - No Replies

https://www4.mcdonalds.ca/cyber-info/info.html    Cyber-Attack on McDonald’s Canada Career Website
MEDIA STATEMENT
March 31, 2017

The McDonald’s Canada (“McDonald’s”) career website (http://www.mcdonalds.ca/ca/en/careers.html or http://www.mcdonalds.ca/ca/fr/careers.html) was recently subject to a cyber-attack.

As a result, the personal information of approximately 95,000 restaurant job applicants has been compromised. Applicants affected are those who applied online for a job at a McDonald’s Canada restaurant between March 2014 and March 2017.  The personal information compromised was limited to applicant name, address, email address, phone number, employment background and other standard application information.  Importantly, our application forms do not request highly sensitive personal information such as social insurance numbers, banking information or health information.

When we learned of this privacy breach we immediately shut down the site and launched an investigation.  The careers webpage will remain shut down until the investigation is complete and appropriate measures are taken to ensure that this type of security breach does not happen again.

While the investigation remains ongoing, all applicants who were directly affected by this privacy breach will be notified by a letter in the mail. Where a mailing address was not provided in the application form, affected applicants will be contacted by using other contact information provided on the application form (email or telephone).

At this time, we have no information that the information taken has been misused.

We apologize to those impacted by this incident.

Those interested in applying for a job should do so in person at any McDonald’s Canada restaurant, including on National Hiring Day, an annual event taking place April 5th, 2017.

Applicants impacted may call our dedicated assistance line at: 1 (877) 238-3790, which is available Monday through Friday, 9:00 a.m. to 7:00 p.m. EST and provide reference number 7827032417 when calling.

Q&A
Q. What happened?
A. The McDonald’s Canada (“McDonald’s”) career website (http://www.mcdonalds.ca/ca/en/careers.html or http://www.mcdonalds.ca/ca/fr/careers.html) was subject to a cyber-attack. The personal information of approximately 95,000 restaurant job applicants has been compromised, as a result of this privacy breach.

Q. When did this privacy breach occur?
A. We are still investigating. However, it appears that the breach occurred in mid-March 2017.

Q. When did McDonald’s Canada become aware of this incident?
A. We learned of this incident in mid-March 2017.

Q. How did McDonald’s Canada discover that the privacy breach had occurred?
A. McDonald’s Canada monitors its databases for any unauthorized access. This monitoring identified unauthorized access to the database.

Q. How many people are affected by this incident?
A. Approximately 95,000 applicants who applied online for jobs at McDonald’s Canada restaurants between March 2014 and March 2017.

Q. What personal information was taken?
A. The personal information taken was any information an applicant inserted into their application form. This information may include an applicant’s name, address, email address, phone number, employment background and other standard application information. Importantly, our application forms do not request highly sensitive personal information such as social insurance numbers, banking information or health information.

Q. Was banking information or SIN taken?
A. No. Importantly, our application forms do not request highly sensitive personal information such as social insurance numbers, banking information or health information.

Q. What did you do when you discovered the attack?
A. Several things. McDonald’s Canada immediately shut down the site and launched an investigation. We also took steps to quarantine the affected database in order to prevent any further exposure. Affected applicants will receive notifications. We have also proactively notified privacy commissioners in every jurisdiction about this security incident. The careers webpage will remain shut down until the investigation is complete and appropriate measures are taken to ensure that this type of security breach does not happen again.

Q. How will I be notified?
A. All individuals whose personal information was impacted will be notified directly by McDonald’s Canada.  Letters will be sent to affected individuals as the primary means of contact. Where a mailing address was not provided in the application form, affected individuals will be contacted by using other information that they provided to McDonald’s Canada on the application form (email or telephone). As an added measure, we have proactively announced this breach publicly to reach as wide a group of applicants as possible.

Q. What steps do I need to take if I think the email is not really from McDonald’s Canada?
A. McDonald’s Canada will only contact you by email if we have your email address, but do not have your mailing address. We will not ask you to respond to the email with a reply message. We will also not ask you to provide any personal information. If you have any concern that the email received is not from McDonald’s Canada, you may call the dedicated assistance line at 1 (877) 238-3790, which is available Monday through Friday, 9:00 a.m. to 7:00 p.m. EST and provide reference number 7827032417 when calling.

Q. If I do not get a letter, what should I do?
A. If you applied online for a job at a McDonald’s Canada restaurant between March 2014 and March 2017, you may call the dedicated assistance line at 1 (877) 238-3790, which is available Monday through Friday, 9:00 a.m. to 7:00 p.m. EST and provide reference number 7827032417 when calling. If you did not apply online, then you are not an affected applicant.

Q. If I am a guardian/parent of a McDonald’s Canada applicant who may have been affected, who can I contact?
A. We have established a call centre to assist those who may have been affected. You and the applicant may call the dedicated assistance line at 1 (877) 238-3790, which is available Monday through Friday, 9:00 a.m. to 7:00 p.m. EST and provide reference number 7827032417 when calling.

Q. If I recently applied online to a McDonald’s Canada restaurant, do I have to re-apply?
A. If you applied online in March 2017 you are encouraged to re-apply in person at your local McDonald’s Canada restaurant.

Print this item

  McAfee Cloud AV 0.5.269.1 Released
Posted by: mrtrout - 04-01-2017 , 03:14 AM - Forum: Freeware - No Replies

http://www.majorgeeks.com/files/details/...ud_av.html   McAfee Cloud AV 0.5.269.1
Author: McAfee, Inc.
Date: 03/31/2017 05:46 PM
Size: 2.11 MB
License: Freeware
Requires: Win 10 / 8 / 7 / Vista / XP   McAfee Cloud AV is a small cloud-based antivirus app designed to protect your machine from spyware, viruses, and malware by targeting their tell-tale behavior rather than just blacklisting specific known viruses, etc.

What that means is suspicious activity will trigger a stop for known and unknown variants — so if it acts like malware McAfee Cloud AV will launch into action and protect your machine.

In addition to the virus protection granted from the cloud-based behavioral detection, McAfee Cloud AV also offers WebAdvisor which can reduce the chances of being infected by providing a warning when you attempt to visit a web page known for distributing malware. This combined detection makes sure that you receive top-notch protection at all times. :  https://home.mcafee.com/Secure/CloudAV/C...x?ctst=1#1    Introducing
McAfee® Cloud AV
Limited Release
We're redefining what antivirus should be.
Fast. Powerful. 100% free.
DOWNLOAD FREE LEARN MORE

Not too big
McAfee® Cloud AV is a tiny app with the power to protect your whole PC. It works quietly - no surprise scans or annoying notifications.

Continue tour  Not too small
Just a few clicks gives essential protection from spyware, viruses, and malware.

Continue tour

It's just right
Because it's powered by the cloud, McAfee® Cloud AV is quick and snappy. Most importantly, your computer is too.
https://home.mcafee.com/Secure/CloudAV/HowItWorks.html    How Cloud-Powered Antivirus Works




Antivirus notices and records suspicious activity, then sends to the cloud.



The cloud analyzes and compares against known malware and reports back to your computer.



Antivirus tells you about the suspicious activity, then quarantines and cleans up dirty files.




Frequently Asked Questions

What is it McAfee® Cloud AV?
McAfee® Cloud AV is a tiny app with the power to protect your whole PC from viruses, malware, and spyware. It works quietly and stays out of your way. We’ll only send important notifications, and won’t ambush you with surprise scans.

How is McAfee® Cloud AV so small?
McAfee® Cloud AV protects your computer from the cloud, so only a tiny file needs to be on your computer. How small is it? It only takes up 60MB on your computer — 75% less than other antivirus apps. That’s small!

What makes McAfee® Cloud AV different from other antiviruses?
Most antivirus solutions use blacklisting, which requires a suspicious file be identified by name before it stops them. This process is difficult, and leaves you exposed to viruses that are brand new. Instead, McAfee® Cloud AV looks at the behavior of files to determine if they’re malware. Suspicious activity triggers a stop for both known and unknown culprits — simply acting like malware sets McAfee® Cloud AV into action.

McAfee® WebAdvisor + Antivirus
In addition to the virus protection leveraged via cloud-based behavioral detection, McAfee® WebAdvisor reduces your chances of being infected by warning you when you try to visit a web page known to distribute malware. This combined detection gives you world class protection.


About McAfee

McAfee has offered award-winning antivirus for decades — in fact, we’ve been doing it longer than anyone else. McAfee® Cloud AV takes a new approach to fighting malware by using the cloud. With its lean, powerful build, McAfee® Cloud AV is our smallest full power antivirus yet. : https://www.virustotal.com/en/file/2396d.../analysis/  SHA256: 2396dfc690e0daf4c741d6b571c8d82645b65d0ddcd6bd0bd1e7261a19aff755
File name: mfeavinstlight.exe
Detection ratio: 0 / 62
Analysis date: 2017-03-30 19:24:46 UTC ( 1 day, 6 hours ago ) CopyrightMcAfee, Inc
Product McAfee Cloud AV
File version 0.5.269.0
Signature verification  Signed file, verified signature
Signing date 4:18 AM 3/17/2017
Signers
[+] McAfee
[+] Symantec Class 3 SHA256 Code Signing CA
[+] VeriSign
Counter signers
[+] GeoTrust 2048-bit Timestamping Signer 2
[+] Symantec Time Stamping Services CA - G2
[+] Thawte Timestamping CA
 Packers identified
F-PROT NSIS   VirusTotal metadata
First submission 2017-03-30 19:24:46 UTC ( 1 day, 6 hours ago )
Last submission 2017-03-30 19:24:46 UTC ( 1 day, 6 hours ago )
File names mfeavinstlight.exe

Print this item

  (Skype users hit by ransomware through in-app malicious ads)
Posted by: mrtrout - 04-01-2017 , 12:23 AM - Forum: Security News - No Replies

http://www.zdnet.com/article/skype-serve...RSSbaffb68    Skype users hit by ransomware through in-app malicious ads
Several users have complained about "fake Flash" ads, which if triggered, can lead to a ransomware attack.

 Zack Whittaker
By Zack Whittaker for Zero Day | March 30, 2017 -- 19:01 GMT (12:01 PDT) | Topic: Security    Several users have complained that ads served through Microsoft's Skype app are serving malicious downloads, which if opened, can trigger ransomware.

News of the issue came from a Reddit thread on Wednesday, in which the original poster said that Skype's home screen -- the first screen that shows up on consumer versions of the software -- was pushing a fake, malicious ad, purporting to be a critical update for the Flash web plug-in.

 Ransomware: An executive guide to one of the biggest menaces on the web
Ransomware: An executive guide to one of the biggest menaces on the web

Everything you need to know about ransomware: how it started, why it's booming, how to protect against it, and what to do if your PC's infected.

Read More
According to the thread, the ad triggered a download of an HTML application, designed to look like a legitimate app. The app, when opened, would download a malicious payload, which locks the user's computer and encrypts its files for ransom.

Many other users in the past few days have also complained of similar issues with Skype's in-app ads, with at least two other people having the same "fake Flash" ad into Thursday.

Knowing it was malicious, the user didn't run the app but instead deconstructed and posted the code.

We asked several experts to deconstruct the code and explain how it works.

The "fake Flash" ad, designed to target Windows machines, pushed a download, which when opened would trigger obfuscated JavaScript. The code starts a new command line, then deletes the application that the user just opened, and runs a PowerShell command, which then downloads a JavaScript Encoded Script (JSE) from a domain that no longer exists, likely one of many disposable domains used to hide an attacker's operations.

All of these steps, one after another, help the malware evade detection by antivirus tools.

"This is a what's generally called a 'two stage' dropper'," said Ali-Reza Anghaie, co-founder of cybersecurity firm Phobos Group, in an email. "It's effectively the utility component of the malware that then decides what else to do based on the command and control it connects to."

But because the domain no longer exists, it's impossible to download the payload to determine exactly what it would've been.

Anghaie said that in "99 percent of cases this is going to be ransomware."

All signs point to this "fake Flash" ad as a spin off of a recent Locky ransomware campaign that also delivers a Kovter trojan, which remains on the system to carry out click-fraud and malvertising campaigns. Locky, which became one of the most notorious ransomware threats last year, uses a similar malicious JavaScript-based attack to lock computers, which execute directly on Windows without the help of any other app.

A similar sample of the malware delivered by the "fake Flash" ad was uploaded to IBM's X-Force, a threat intelligence sharing site. Although the payload is downloaded from another disposable domain, the malware matches the pattern of the web address used in this attack.

It's not known how many domains are used in this campaign, but it's thought that each domain is registered and deregistered quickly to keep the attacker from paying for the domain, and to prevent researchers from digging around.

It's not the first time Skype has been hit by an ad-based attack.

Threatpost reported in 2015 that malicious ads seen in the Skype client would push users to fake Java or Flash ads. And similar reports of attacks from the Angler exploit kit last year pointed from one ad platform, which had let through a malicious ad campaign.

When reached, Microsoft did not comment prior to publication.

Print this item

  Icecream PDF Split&Merge 3.34 Released
Posted by: mrtrout - 03-31-2017 , 10:18 PM - Forum: Freeware - No Replies

http://icecreamapps.com/PDF-Split-and-Me...gelog.html    3.34
31 Mar 2017
Latest version
Installer bug fixes  Download
VERSION: 3.34 SIZE: 17.1MB   http://icecreamapps.com/Download-PDF-Split-and-Merge/   Download PDF Split & Merge

Product: Icecream PDF Split & Merge
Version: 3.34 Size: 17.1 Mb System: Windows 10, 8, 7, Vista, XP, Mac OS X
License: Freemium :  https://www.virustotal.com/en/file/c8162.../analysis/  SHA256: c8162247d2a8196f061f4ea3816305efddd4dbca6ad2f885f32c678bb6ad2000
File name: pdf_split_and_merge_setup.exe
Detection ratio: 0 / 61
Analysis date: 2017-03-31 20:28:38 UTC ( 15 minutes ago ) Product Icecream PDF Split and Merge
File version
Description Icecream PDF Split and Merge Setup
Comments This installation was built with Inno Setup.
Signature verification  Signed file, verified signature
Signing date 3:10 PM 3/31/2017
Signers
[+] Icecream Apps Ltd
[+] COMODO RSA Code Signing CA
[+] COMODO SECURE?
Counter signers
[+] COMODO SHA-256 Time Stamping Signer
[+] USERTrust (Code Signing)
 Packers identified
F-PROT INNO, UTF-8, Unicode  VirusTotal metadata
First submission 2017-03-31 20:28:38 UTC ( 15 minutes ago )
Last submission 2017-03-31 20:28:38 UTC ( 15 minutes ago )
File names pdf_split_and_merge_setup.exe

Print this item

  Icecream Screen Recorder 4.73 Released
Posted by: mrtrout - 03-31-2017 , 10:16 PM - Forum: Freeware - No Replies

http://icecreamapps.com/Screen-Recorder/changelog.html    Screen
Recorder
Download
VERSION: 4.74 SIZE: 50.3MB
4.74
31 Mar 2017
Latest version
Installer bug fixes   http://icecreamapps.com/Download-Screen-Recorder/   Download Screen Recorder

Product: Icecream Screen Recorder
Version: 4.74 Size: 50.3 Mb System: Windows 10, 8, 7, Vista
License: Freemium :  https://www.virustotal.com/en/file/d3ca9...490993173/  SHA256: d3ca9487d70721412b60845b71650e3c71764ad542f544a52eb79be6435a1fb0
File name: screen_recorder_setup.exe
Detection ratio: 0 / 60
Analysis date: 2017-03-31 20:46:13 UTC ( 1 minute ago ) Product Icecream Screen Recorder
File version
Description Icecream Screen Recorder Setup
Comments This installation was built with Inno Setup.
Signature verification  Signed file, verified signature
Signing date 3:13 PM 3/31/2017
Signers
[+] Icecream Apps Ltd
[+] COMODO RSA Code Signing CA
[+] COMODO SECURE?
Counter signers
[+] COMODO SHA-256 Time Stamping Signer
[+] USERTrust (Code Signing)
 Packers identified
F-PROT INNO, NSIS, appended, UTF-8, Unicode  VirusTotal metadata
First submission 2017-03-31 20:46:13 UTC ( 1 minute ago )
Last submission 2017-03-31 20:46:13 UTC ( 1 minute ago )
File names screen_recorder_setup.exe

Print this item

  Icecream Slideshow Maker 2.18 Released
Posted by: mrtrout - 03-31-2017 , 10:15 PM - Forum: Freeware - No Replies

http://icecreamapps.com/Slideshow-Maker/changelog.html   2.18
31 Mar 2017
Latest version
Installer bug fixes Download
VERSION: 2.18 SIZE: 31.3MB   http://icecreamapps.com/Download-Slideshow-Maker/   System: Windows 10, 8, 7, Vista, XP
License: FREE: https://www.virustotal.com/en/file/3112b.../analysis/  SHA256: 3112bb4869dfe4ff7e458328cb3f78ba4dd089ade6b5f1250c8cfa4268b0e313
File name: slideshow_maker_setup.exe
Detection ratio: 0 / 60
Analysis date: 2017-03-31 20:20:21 UTC ( 28 minutes ago ) Product Icecream Slideshow Maker
File version
Description Icecream Slideshow Maker Setup
Comments This installation was built with Inno Setup.
Signature verification  Signed file, verified signature
Signing date 3:14 PM 3/31/2017
Signers
[+] Icecream Apps Ltd
[+] COMODO RSA Code Signing CA
[+] COMODO SECURE?
Counter signers
[+] COMODO SHA-256 Time Stamping Signer
[+] USERTrust (Code Signing)
 Packers identified
F-PROT INNO, NSIS, appended, UTF-8, Unicode  VirusTotal metadata
First submission 2017-03-31 18:07:37 UTC ( 2 hours, 40 minutes ago )
Last submission 2017-03-31 20:20:21 UTC ( 28 minutes ago )
File names slideshow_maker_setup.exe

Print this item

  Icecream Image Resizer 1.47 Released
Posted by: mrtrout - 03-31-2017 , 10:13 PM - Forum: Freeware - No Replies

http://icecreamapps.com/Image-Resizer/changelog.html  1.47
31 Mar 2017
Latest version
Installer bug fixes Download
VERSION: 1.47 SIZE: 15.4MB  http://icecreamapps.com/Download-Image-Resizer/  System: Windows 10, 8, 7, Vista, XP
License: FREE :  https://www.virustotal.com/en/file/e186d...490991832/  SHA256: e186d9fb5a7959c086cdf3e4feba3ca3f5fdae8b4dc323b5b89c47a6889d3701
File name: image_resizer_setup.exe
Detection ratio: 0 / 61
Analysis date: 2017-03-31 20:23:52 UTC ( 11 minutes ago ) Product Icecream Image Resizer
File version
Description Icecream Image Resizer Setup
Comments This installation was built with Inno Setup.
Signature verification  Signed file, verified signature
Signing date 3:16 PM 3/31/2017
Signers
[+] Icecream Apps Ltd
[+] COMODO RSA Code Signing CA
[+] COMODO SECURE?
Counter signers
[+] COMODO SHA-256 Time Stamping Signer
[+] USERTrust (Code Signing)
 Packers identified
F-PROT INNO   VirusTotal metadata
First submission 2017-03-31 20:23:52 UTC ( 18 minutes ago )
Last submission 2017-03-31 20:23:52 UTC ( 18 minutes ago )
File names image_resizer_setup.exe

Print this item

  Icecream PDF Converter 2.70 Released
Posted by: mrtrout - 03-31-2017 , 10:09 PM - Forum: Freeware - No Replies

http://icecreamapps.com/PDF-Converter/changelog.html  2.70
31 Mar 2017
Latest version
Installer bug fixes Download
VERSION: 2.70 SIZE: 126MB  http://icecreamapps.com/Download-PDF-Converter/   System: Windows 10, 8, 7, Vista, XP
License: Freemium: https://www.virustotal.com/en/file/7f761.../analysis/  SHA256: 7f7610f51955233d7af7376ef17a5bd231d9bbee74e2badd33965ecc99a3a316
File name: pdf_converter_setup.exe
Detection ratio: 1 / 59
Analysis date: 2017-03-31 20:36:45 UTC ( 6 minutes ago ) Qihoo-360 HEUR/QVM06.1.0000.Malware.Gen 20170331 (false positive by Qihoo-360) Product Icecream PDF Converter
File version
Description Icecream PDF Converter Setup
Comments This installation was built with Inno Setup.
Signature verification  Signed file, verified signature
Signing date 3:14 PM 3/31/2017
Signers
[+] Icecream Apps Ltd
[+] COMODO RSA Code Signing CA
[+] COMODO SECURE?
Counter signers
[+] COMODO SHA-256 Time Stamping Signer
[+] USERTrust (Code Signing)
 Packers identified
F-PROT INNO VirusTotal metadata
First submission 2017-03-31 20:36:45 UTC ( 6 minutes ago )
Last submission 2017-03-31 20:36:45 UTC ( 6 minutes ago )
File names pdf_converter_setup.exe

Print this item