user profile

R. Albrecht
R. Albrecht
Member Since: 03-18-2015
4 Reviews
small-community-3
microsoft-r.com
Masquerades as Virus Protection

This website came from popups that claim that antivirus software is out of date. The first, it said the Norton software was out of date. Norton wasn't even installed. So I installed and activated Norton, which found no threats after a full scan. But the popup is still there -- now saying that McAfee is out of date.

I don't know what going into this website will do, but it sure uses nefarious means to get you there!

small-community-1
tenten.co
Phishing attach

I'm pretty sure this caused the following:

Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
5/9/2017 2:20:10 PM,High,An intrusion attempt by geheppauld.com was blocked.,Blocked,No Action Required,System Infected: Trojan.Snifula Activity 9,No Action Required,No Action Required,"geheppauld.com (151.80.190.158, 80)",geheppauld.com/ls5/forum.php,"ROBINSTOSHIBA (192.168.1.106, 55232)",geheppauld.com (151.80.190.158),"TCP, www-http"
Network traffic from <b&gt;geheppauld.com/ls5/forum.php</b&gt; matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME2\WINDOWS\SYSWOW64\SVCHOST.EXE. To stop being notified for this type of traffic, in the <b&gt;Actions</b&gt; panel, click <b&gt;Stop Notifying Me</b&gt;.

small-community-2
everyonecanmanage...
Not clear what it's doing.

I got to this website via the "Word Power Package" tool, which I have also reviewed (negatively). The page at everyonecanmanage.com appears to reload itself over and over. No specific damage detected, but coupled with the questionable behavior of the Word Power Package, it is all very suspicious.

small-community-2
softpedia.com
Word Power Package appears to be malware

I downloaded the Word Power Package. It seemed to work fine for a few days. Then, upon opening Word today, I was prompted with a dialog that said something like "Enter valid serial", with a link to "Get a valid serial". The link went to a website (http://everyonecanmanage.com) that appeared to reload the same page over and over. There is no way to close the dialog to use word. I could find no way to unstill the Word Power Package other than by removing files and editing the registry manually.