Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread Vincent Dawans
OK got the setup.exe back from my recycling bin and submitted it to virustotal. Here is the result: https://www.virustotal.com/gui/file/15d333959c6bf4bc913a3526a7aae8855af60b08a2542ee245d18b79dc7eede5 On Fri, Dec 9, 2022 at 4:41 PM Glenn Fowler wrote: > Thanks Vincent. If you could upload the

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread Glenn Fowler
Thanks Vincent. If you could upload the file to virustotal that would help as well. On Fri, Dec 9, 2022 at 7:22 PM Vincent Dawans wrote: > Glenn: I am on the US West coast. Oregon. The fake site was never on the > default page but at https://gnu-cash.org/main.php -- but other users now > report

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread Glenn Fowler
I see the Dot Com Inovations as well. I tried Firefox & Edge. I'm in the US. Vincent, where are you from? On Fri, Dec 9, 2022 at 6:50 PM John Ralls wrote: > I don't see that ad when I search Google for gnucash; when I type > https://www.gnu-cash.org/ into my browser's address bar I'm taken to a

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread Vincent Dawans
That's good news. Possibly the whole site is now blocked upstream and I am just seeing a cached version on my side. It would explain why I also get a blank page in incognito mode and Edge. I only have a cached version on my regular Chrome. On Fri, Dec 9, 2022 at 4:11 PM Stan Brown wrote: > > On

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread Stan Brown
On 2022-12-09 16:02, Vincent Dawans wrote: > You need to go to the main.php page link to see the fake site. Full link is > https://gnu-cash.org/main.php or possibly https://www.gnu-cash.org/main.php With both of those I see a completely blank page, in the latest Chrome on Windows 10. Stan

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread Vincent Dawans
OK sorry for the flood of email but as of 4:05PM US Pacific time the ad is no longer showing for me either. So possibly already removed via my report and others. As for the actual site there is nothing we can do, the important thing is that it doesn't show up on Google. No trace of it on Bing

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread Vincent Dawans
You need to go to the main.php page link to see the fake site. Full link is https://gnu-cash.org/main.php or possibly https://www.gnu-cash.org/main.php Google ads are location and search history dependent so might not show up everywhere. Google has a separate tool to report phishing sites. But

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread kschneider bout-tyme . net
I just checked as well and don’t see the fake site. Ken Schneider > On Dec 9, 2022, at 6:52 PM, John Ralls wrote: > > I don't see that ad when I search Google for gnucash; when I type > https://www.gnu-cash.org/ into my browser's address bar I'm taken to a page > titled "Dot Com

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread David Carlson
Mystery deepens! When I tried to open this fake website it was not available in Tor browser but pinging it revealed a response from IPV6 address 2606:4700:3030::6815:5f93. That IP does not seem to be registered On Fri, Dec 9, 2022 at 5:40 PM Vincent Dawans wrote: > Added screenshot showing

Re: [GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

2022-12-09 Thread John Ralls
I don't see that ad when I search Google for gnucash; when I type https://www.gnu-cash.org/ into my browser's address bar I'm taken to a page titled "Dot Com Inovations"[sic] with a heading "October 20, 2022" and nothing at all about GnuCash. Not that there would be anything we could do about