03-09-2017 , 01:08 AM
https://notepad-plus-plus.org/news/notep...issue.html v 7.3.3 - Fix CIA Hacking Notepad++ Issue 08 Mar 2017 21:58:00
"Vault 7: CIA Hacking Tools Revealed" has been published by Wikileaks recentely, and Notepad++ is on the list.
The issue of a hijacked DLL concerns scilexer.dll (needed by Notepad++) on a compromised PC, which is replaced by a modified scilexer.dll built by the CIA. When Notepad++ is launched, the modified scilexer.dll is loaded instead of the original one.
It doesn't mean that CIA is interested in your coding skill or in your sex message content, but rather it prevents raising any red flags while the DLL does data collection in the background.
For remedying this issue, from this release (v7.3.3) forward, notepad++.exe checks the certificate validation in scilexer.dll before loading it. If the certificate is missing or invalid, then it just won't be loaded, and Notepad++ will fail to launch.
Checking the certificate of a DLL makes it harder to hack. Note that once users’ PCs are compromised, the hackers can do anything on the PCs. This solution only prevents from Notepad++ loading a CIA homemade DLL. It doesn't prevent your original notepad++.exe from being replaced by modified notepad++.exe while the CIA is controlling your PC.
Just like knowing the lock is useless for people who are willing to go into my house, I still shut the door and lock it every morning when I leave home. We are in a f**king corrupted world, unfortunately.
Otherwise there are a lot of enhancements and bug-fixes which improve your Notepad++ experience. For all the detail change log, please check in the Download page.
Download 7.3.3 here:
Notepad++ Download
https://notepad-plus-plus.org/download/v7.3.3.html
Auto-updater will be triggered in few days if there's no critical issue found.
If you find any regression or critical bug, please report here:
https://notepad-plus-plus.org/community/...epad-issue : https://notepad-plus-plus.org/download/v7.3.3.html Download Notepad++ 7.3.3
Release Date: 2017-03-08
Download 32-bit x86
Notepad++ Download
Notepad++ Installer 32-bit x86: Take this one if you have no idea which one you should take.
Notepad++ zip package 32-bit x86: Don't want to use installer? Check this one (zip format).
Notepad++ 7z package 32-bit x86: Don't want to use installer? 7z format.
Notepad++ minimalist package 32-bit x86: No theme, no plugin, no updater, quick download and play directly. 7z format. : https://www.virustotal.com/en/file/c59a2.../analysis/ SHA256: c59a2b8ba98d0bb849e55aa8ad1cfc9af54ed9acc1a087a43033e23bebedc0e8
File name: npp.7.3.3.Installer.exe
Detection ratio: 1 / 61
Analysis date: 2017-03-08 21:11:40 UTC ( 2 hours, 45 minutes ago ) Comodo Application.Win32.Firseria.GH 20170308 (1 false positive by Comodo) Signature verification Signed file, verified signature
Signing date 3:42 AM 3/8/2017
Signers
[+] Notepad++
[+] DigiCert SHA2 High Assurance Code Signing CA
[+] DigiCert
Counter signers
[+] DigiCert Timestamp Responder
[+] DigiCert Assured ID CA-1
[+] DigiCert
Packers identified
F-PROT NSIS, appended VirusTotal metadata
First submission 2017-03-08 15:35:01 UTC ( 8 hours, 22 minutes ago )
Last submission 2017-03-08 15:35:01 UTC ( 8 hours, 22 minutes ago )
File names npp.7.3.3.Installer.exe
target.exe
npp.7.3.3.Installer.exe
npp.7.3.3.Installer.exe
npp.7.3.3.Installer.exe
https://www.virustotal.com/en/file/92448.../analysis/ SHA256: 9244864da86fd41ada854cbd6caaef9c0c97802b687adfce22379f767a2620bb
File name: npp.7.3.3.bin.zip
Detection ratio: 1 / 57
Analysis date: 2017-03-08 21:23:27 UTC ( 2 hours, 35 minutes ago ) Webroot W32.Rogue.Gen 20170308 ( 1 false positive by Webroot ) VirusTotal metadata
First submission 2017-03-08 21:23:27 UTC ( 2 hours, 35 minutes ago )
Last submission 2017-03-08 21:23:27 UTC ( 2 hours, 35 minutes ago )
File names npp.7.3.3.bin.zip
"Vault 7: CIA Hacking Tools Revealed" has been published by Wikileaks recentely, and Notepad++ is on the list.
The issue of a hijacked DLL concerns scilexer.dll (needed by Notepad++) on a compromised PC, which is replaced by a modified scilexer.dll built by the CIA. When Notepad++ is launched, the modified scilexer.dll is loaded instead of the original one.
It doesn't mean that CIA is interested in your coding skill or in your sex message content, but rather it prevents raising any red flags while the DLL does data collection in the background.
For remedying this issue, from this release (v7.3.3) forward, notepad++.exe checks the certificate validation in scilexer.dll before loading it. If the certificate is missing or invalid, then it just won't be loaded, and Notepad++ will fail to launch.
Checking the certificate of a DLL makes it harder to hack. Note that once users’ PCs are compromised, the hackers can do anything on the PCs. This solution only prevents from Notepad++ loading a CIA homemade DLL. It doesn't prevent your original notepad++.exe from being replaced by modified notepad++.exe while the CIA is controlling your PC.
Just like knowing the lock is useless for people who are willing to go into my house, I still shut the door and lock it every morning when I leave home. We are in a f**king corrupted world, unfortunately.
Otherwise there are a lot of enhancements and bug-fixes which improve your Notepad++ experience. For all the detail change log, please check in the Download page.
Download 7.3.3 here:
Notepad++ Download
https://notepad-plus-plus.org/download/v7.3.3.html
Auto-updater will be triggered in few days if there's no critical issue found.
If you find any regression or critical bug, please report here:
https://notepad-plus-plus.org/community/...epad-issue : https://notepad-plus-plus.org/download/v7.3.3.html Download Notepad++ 7.3.3
Release Date: 2017-03-08
Download 32-bit x86
Notepad++ Download
Notepad++ Installer 32-bit x86: Take this one if you have no idea which one you should take.
Notepad++ zip package 32-bit x86: Don't want to use installer? Check this one (zip format).
Notepad++ 7z package 32-bit x86: Don't want to use installer? 7z format.
Notepad++ minimalist package 32-bit x86: No theme, no plugin, no updater, quick download and play directly. 7z format. : https://www.virustotal.com/en/file/c59a2.../analysis/ SHA256: c59a2b8ba98d0bb849e55aa8ad1cfc9af54ed9acc1a087a43033e23bebedc0e8
File name: npp.7.3.3.Installer.exe
Detection ratio: 1 / 61
Analysis date: 2017-03-08 21:11:40 UTC ( 2 hours, 45 minutes ago ) Comodo Application.Win32.Firseria.GH 20170308 (1 false positive by Comodo) Signature verification Signed file, verified signature
Signing date 3:42 AM 3/8/2017
Signers
[+] Notepad++
[+] DigiCert SHA2 High Assurance Code Signing CA
[+] DigiCert
Counter signers
[+] DigiCert Timestamp Responder
[+] DigiCert Assured ID CA-1
[+] DigiCert
Packers identified
F-PROT NSIS, appended VirusTotal metadata
First submission 2017-03-08 15:35:01 UTC ( 8 hours, 22 minutes ago )
Last submission 2017-03-08 15:35:01 UTC ( 8 hours, 22 minutes ago )
File names npp.7.3.3.Installer.exe
target.exe
npp.7.3.3.Installer.exe
npp.7.3.3.Installer.exe
npp.7.3.3.Installer.exe
https://www.virustotal.com/en/file/92448.../analysis/ SHA256: 9244864da86fd41ada854cbd6caaef9c0c97802b687adfce22379f767a2620bb
File name: npp.7.3.3.bin.zip
Detection ratio: 1 / 57
Analysis date: 2017-03-08 21:23:27 UTC ( 2 hours, 35 minutes ago ) Webroot W32.Rogue.Gen 20170308 ( 1 false positive by Webroot ) VirusTotal metadata
First submission 2017-03-08 21:23:27 UTC ( 2 hours, 35 minutes ago )
Last submission 2017-03-08 21:23:27 UTC ( 2 hours, 35 minutes ago )
File names npp.7.3.3.bin.zip