<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Fake Notepad++ website]]></title><description><![CDATA[<p dir="auto">I just unwittingly downloaded notepad-main.zip from <code>notepad DOT di-kr DOT com</code> and executed the exe file in it. Nothing happened. I scanned my PC using windows defender and malwarebyte and it did not detect anything. Can you advise what should I do?</p>
<p dir="auto"><em>moderator edit: change the URL to a hint about the site instead of a link, to avoid directing a lot of traffic to that other site; no need to boost the numbers on a non-official source</em></p>
]]></description><link>https://community.notepad-plus-plus.org/topic/23827/fake-notepad-website</link><generator>RSS for Node</generator><lastBuildDate>Mon, 20 Jul 2026 18:36:31 GMT</lastBuildDate><atom:link href="https://community.notepad-plus-plus.org/topic/23827.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 30 Nov 2022 10:14:10 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Fake Notepad++ website on Fri, 15 Dec 2023 17:54:14 GMT]]></title><description><![CDATA[<p dir="auto">These were paid ads… malware developers sometimes buy advertising on Google</p>
]]></description><link>https://community.notepad-plus-plus.org/post/91256</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/91256</guid><dc:creator><![CDATA[jonathandl2]]></dc:creator><pubDate>Fri, 15 Dec 2023 17:54:14 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Tue, 27 Dec 2022 19:04:23 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/datatraveller1" aria-label="Profile: datatraveller1">@<bdi>datatraveller1</bdi></a> said in <a href="/post/82800">Fake Notepad++ website</a>:</p>
<blockquote>
<p dir="auto">Hi <a class="plugin-mentions-user plugin-mentions-a" href="/user/peterjones" aria-label="Profile: PeterJones">@<bdi>PeterJones</bdi></a><br />
Yes, strangely I also don’t get these “Ad” links anymore I used to get a few hours ago with my google search.</p>
</blockquote>
<p dir="auto">I think you can “report” such ads to Google, and they can take action, because it is in Google’s best interests to not be advertising dangerous sites and malware-“copies” of real software.  presumably something like that happened.  In the future, you might look into the ▼ menu that Google provides on such ads, and see if it has a “report” option.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82807</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82807</guid><dc:creator><![CDATA[PeterJones]]></dc:creator><pubDate>Tue, 27 Dec 2022 19:04:23 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Tue, 27 Dec 2022 17:49:28 GMT]]></title><description><![CDATA[<p dir="auto">Hi <a class="plugin-mentions-user plugin-mentions-a" href="/user/peterjones" aria-label="Profile: PeterJones">@<bdi>PeterJones</bdi></a><br />
Yes, strangely I also don’t get these “Ad” links anymore I used to get a few hours ago with my google search.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82800</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82800</guid><dc:creator><![CDATA[datatraveller1]]></dc:creator><pubDate>Tue, 27 Dec 2022 17:49:28 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Tue, 27 Dec 2022 17:41:20 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/ajdin-alibegovic" aria-label="Profile: Ajdin-Alibegovic">@<bdi>Ajdin-Alibegovic</bdi></a> , <a class="plugin-mentions-user plugin-mentions-a" href="/user/datatraveller1" aria-label="Profile: datatraveller1">@<bdi>datatraveller1</bdi></a> , and others:</p>
<p dir="auto">I cannot replicate your search results.  Whether I use my normal Chrome instance (which has all my cookies) or whether I use an Incognito Chrome (which has no cookies, and the Google search engine thus thinks I’m a fresh victim) or whether I use a Firefox In Private window (again, no cookies, so the search engine sees an unknown user), or whether I use a portable browser that doesn’t have any cookies set from any normal site, I get an official Notepad++ URL as the first result on Google, without any of those ads for dangerous sites.</p>
<p dir="auto">(I might say that in Chrome, it might be because my adblocker software protects me; but I just confirmed that in the Firefox In Private window, there are no extensions/plugins/etc installed, so it cannot be an ad-blocker there; and my portable browser doesn’t have such, either.)</p>
<p dir="auto">The only thing I can think is that your collection of cookies in your browser of choice, plus your browsing history on Google, has trained the Google-AI that you <em>like</em> going to those dangerous sites, and you <em>like</em> getting the ads for spoof download sites.  So my advice to you would be to clear your browsing history, cache, and cookies… and see if you can convince Google to forget your search history, and see if you can start with a blank slate and see if your search results get cleaned up.  (This has the negative side effect of requiring you to re-login to a bunch of sites, and will clear your Wordle stats, which would be rather unfortunate.  But it might be worth the hassle if it cleans up your search results.  Maybe try from an Incognito/Private window first, before doing something that drastic).  If it doesn’t clean up your search results, then you might want to install (better) adblocker software on your browser and (better) antivirus/antimalware on your computer, and to start taking an active approach in <em>not clicking</em> on links that don’t look like the official site for the application.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82798</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82798</guid><dc:creator><![CDATA[PeterJones]]></dc:creator><pubDate>Tue, 27 Dec 2022 17:41:20 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Tue, 27 Dec 2022 16:56:55 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/datatraveller1" aria-label="Profile: datatraveller1">@<bdi>datatraveller1</bdi></a> said in <a href="/post/82783">Fake Notepad++ website</a>:</p>
<blockquote>
<p dir="auto">Does anybody know anything about this website?</p>
</blockquote>
<p dir="auto">it’s not Notepad++'s official website, and thus you shouldn’t visit it.</p>
<p dir="auto">And please do not post links to suspect websites in the forum. That just increases their “score” for search engines, and directs more traffic to them.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82794</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82794</guid><dc:creator><![CDATA[PeterJones]]></dc:creator><pubDate>Tue, 27 Dec 2022 16:56:55 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Tue, 27 Dec 2022 16:57:54 GMT]]></title><description><![CDATA[<p dir="auto">Another hint: If I google for Notepad++, the first result I get is <code>https colon slash slash notepaad dot masterkariyer dot com slash</code><br />
Does anybody know anything about this website?</p>
<p dir="auto"><em>edit: moderator obfuscated link to potentially dangerous external website</em></p>
]]></description><link>https://community.notepad-plus-plus.org/post/82783</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82783</guid><dc:creator><![CDATA[datatraveller1]]></dc:creator><pubDate>Tue, 27 Dec 2022 16:57:54 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Mon, 26 Dec 2022 21:43:31 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/ajdin-alibegovic" aria-label="Profile: Ajdin-Alibegovic">@<bdi>Ajdin-Alibegovic</bdi></a> ,<br />
I should have mentioned, that I also use DuckDuckGo, instead of Google, most of the time, anyway…just because of that kind of tomfoolery.<br />
As you’ll  notice from my below screenshots, both using FireFox with AdBlock on, using Google and DuckDuckGo, I get basically the same result.  Besides the misname sites, I hate Ads on the wire I  pay for on the computer I pay for…and if my wife would let me, I’d cancel Philo on the Roku because I have to pay for that, and I get ads.  Could you tell I hate ads free riding on my dime? :)</p>
<p dir="auto">Google:<br />
<img src="/assets/uploads/files/1672090909401-googlenpp_w_adblock.png" alt="GoogleNPP_W_AdBlock.PNG" class=" img-fluid img-markdown" /></p>
<p dir="auto">DuckDuckGo:<br />
<img src="/assets/uploads/files/1672090928808-duckduckgonpp_w_adblock.png" alt="DuckDuckGoNPP_W_AdBlock.PNG" class=" img-fluid img-markdown" /></p>
<p dir="auto">I hope this will help other users to start being proactive about avoiding phishing links in a commercially motivated search site. :) DuckDuckGo, won’t even let you open a window when you right click on one that is listed as an “ad”. :)</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82770</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82770</guid><dc:creator><![CDATA[Lycan Thrope]]></dc:creator><pubDate>Mon, 26 Dec 2022 21:43:31 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Mon, 26 Dec 2022 18:41:49 GMT]]></title><description><![CDATA[<p dir="auto">and threat detected is<br />
\Desktop\Notepad++Setup\Notepad++Setup_1.exe has been detected as infected with Gen:Suspicious.Cloud.4.@xZ@ayqe0Kni.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82766</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82766</guid><dc:creator><![CDATA[Ajdin Alibegovic]]></dc:creator><pubDate>Mon, 26 Dec 2022 18:41:49 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Mon, 26 Dec 2022 18:37:10 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/lycan-thrope" aria-label="Profile: Lycan-Thrope">@<bdi>Lycan-Thrope</bdi></a> said in <a href="/post/82370">Fake Notepad++ website</a>:</p>
<blockquote>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/marvin-lorenzo" aria-label="Profile: Marvin-Lorenzo">@<bdi>Marvin-Lorenzo</bdi></a> ,</p>
<p dir="auto">Hmm, I just did two searches, in both Google and DuckDuckGo on <code>Notepad++</code> and both had the listing on the left start with the official site, plus on the right hand a link to the official site with some Wikipedia information.</p>
<p dir="auto">What  kind of search are you using? What was the search term? Also, what are your settings and what is the browser you’re using? I don’t use anything but Mozilla Firefox with adblocking.</p>
</blockquote>
<p dir="auto">This is major.<br />
I just did what original poster did.  And I used google search.<br />
<img src="/assets/uploads/files/1672079775482-screenshot-2022-12-26-192039.jpg" alt="Screenshot 2022-12-26 192039.jpg" class=" img-fluid img-markdown" /><br />
printscreen attached.<br />
I can now only hope that my AV solution stopped this thread as it said it did.<br />
but it was a multiple minute fight between my AV and this file.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82765</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82765</guid><dc:creator><![CDATA[Ajdin Alibegovic]]></dc:creator><pubDate>Mon, 26 Dec 2022 18:37:10 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Sat, 10 Dec 2022 23:09:40 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/marvin-lorenzo" aria-label="Profile: Marvin-Lorenzo">@<bdi>Marvin-Lorenzo</bdi></a> ,</p>
<p dir="auto">Hmm, I just did two searches, in both Google and DuckDuckGo on <code>Notepad++</code> and both had the listing on the left start with the official site, plus on the right hand a link to the official site with some Wikipedia information.</p>
<p dir="auto">What  kind of search are you using? What was the search term? Also, what are your settings and what is the browser you’re using? I don’t use anything but Mozilla Firefox with adblocking.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82370</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82370</guid><dc:creator><![CDATA[Lycan Thrope]]></dc:creator><pubDate>Sat, 10 Dec 2022 23:09:40 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Sat, 10 Dec 2022 16:15:14 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/marvin-lorenzo" aria-label="Profile: Marvin-Lorenzo">@<bdi>Marvin-Lorenzo</bdi></a></p>
<p dir="auto">Ah, okay, that makes more sense I suppose.<br />
I would seriously suspect that your system is compromised now, perhaps very compromised.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82363</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82363</guid><dc:creator><![CDATA[Alan Kilborn]]></dc:creator><pubDate>Sat, 10 Dec 2022 16:15:14 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Sat, 10 Dec 2022 15:11:36 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/alan-kilborn" aria-label="Profile: Alan-Kilborn">@<bdi>Alan-Kilborn</bdi></a> at that time, that fake notepad++ website was first in the google search result. The download page looks exactly the same and I didn’t bother check the url.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82360</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82360</guid><dc:creator><![CDATA[Marvin Lorenzo]]></dc:creator><pubDate>Sat, 10 Dec 2022 15:11:36 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Wed, 30 Nov 2022 14:24:59 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/marvin-lorenzo" aria-label="Profile: Marvin-Lorenzo">@<bdi>Marvin-Lorenzo</bdi></a> said in <a href="/post/82131">Fake Notepad++ website</a>:</p>
<blockquote>
<p dir="auto">unwittingly downloaded</p>
</blockquote>
<p dir="auto">This is dubious.<br />
You knew what you were doing.<br />
If you are going to download Notepad++, why would you not go to its site and do it there?</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82139</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82139</guid><dc:creator><![CDATA[Alan Kilborn]]></dc:creator><pubDate>Wed, 30 Nov 2022 14:24:59 GMT</pubDate></item><item><title><![CDATA[Reply to Fake Notepad++ website on Wed, 30 Nov 2022 14:21:47 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/marvin-lorenzo" aria-label="Profile: Marvin-Lorenzo">@<bdi>Marvin-Lorenzo</bdi></a> ,</p>
<p dir="auto">Delete it.  Only install Notepad++ from official sources.  Even if you were lucky enough to not get a virus or malware, the Notepad++ developers do not support copies of Notepad++ downloaded from anyplace that’s not on the official github repo (<a href="https://github.com/notepad-plus-plus/notepad-plus-plus/" rel="nofollow ugc">https://github.com/notepad-plus-plus/notepad-plus-plus/</a>) or from the <a href="http://notepad-plus-plus.org" rel="nofollow ugc">notepad-plus-plus.org</a> domain (<a href="https://notepad-plus-plus.org/downloads/" rel="nofollow ugc">https://notepad-plus-plus.org/downloads/</a> or <a href="http://download.notepad-plus-plus.org/repository/" rel="nofollow ugc">http://download.notepad-plus-plus.org/repository/</a>).</p>
]]></description><link>https://community.notepad-plus-plus.org/post/82138</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/82138</guid><dc:creator><![CDATA[PeterJones]]></dc:creator><pubDate>Wed, 30 Nov 2022 14:21:47 GMT</pubDate></item></channel></rss>