Illegal redistribution by windowsactivator.net (likely malware too)

General project discussion.
Use this as a last resort if your topic does not fit in any of the other boards but it still on-topic.
Forum rules
This General Discussion board is meant for topics that are still relevant to Pale Moon, web browsers, browser tech, UXP applications, and related, but don't have a more fitting board available.

Please stick to the relevance of this forum here, which focuses on everything around the Pale Moon project and its user community. "Random" subjects don't belong here, and should be posted in the Off-Topic board.
User avatar
jobbautista9
Board Warrior
Board Warrior
Posts: 1194
Joined: 2020-11-03, 06:47
Location: Philippines

Illegal redistribution by windowsactivator.net (likely malware too)

Post by jobbautista9 » 2025-03-11, 13:33

The webpage in question: https://windowsactivator.net/pale-moon- ... y-x32-x64/

The download points to a zip file in MediaFire (https://www.mediafire.com/file/556q1l9i ... !.zip/file). I've sent an email to their abuse contact asking them to remove it.

I found this while searching in Mojeek, and I've used their feedback form as well asking them to delist it from the search results (which is third in the list).
Image

Tired of creating stuff!

Avatar artwork by Shinki669: https://www.pixiv.net/artworks/113645617

XUL add-ons developer. You can find a list of add-ons I manage at http://rw.rs/~job/software.html.

User avatar
Moonchild
Project founder
Project founder
Posts: 39305
Joined: 2011-08-28, 17:27
Location: Sweden

Re: Illegal redistribution by windowsactivator.net (likely malware too)

Post by Moonchild » 2025-03-11, 13:50

Confirmed that this is malware. They try to prevent scanning and detection of it by (1) double-packing it as a 7z inside a zip, (2) password protecting the 7z, (3) using non-ascii character filename to send instructions to unpack, and (4) padding the setup.exe to a very large file size hoping AV scanners will skip it and preventing virustotal from allowing it as an upload.
"Praise from a narcissistic person is always a poison dart. They don't share the stage, so discernment matters." - Dr. Ramani
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
BenFenner
Keeps coming back
Keeps coming back
Posts: 913
Joined: 2015-06-01, 12:52
Location: US Southeast

Re: Illegal redistribution by windowsactivator.net (likely malware too)

Post by BenFenner » 2025-03-11, 15:35

Oh, fun! :lol:

User avatar
Massacre
Fanatic
Fanatic
Posts: 175
Joined: 2020-05-01, 13:16

Re: Illegal redistribution by windowsactivator.net (likely malware too)

Post by Massacre » 2025-03-11, 16:51

It is obvious that "Pale Moon crack serial key" will point only to malware.

User avatar
billmcct
Board Warrior
Board Warrior
Posts: 1112
Joined: 2012-09-04, 15:19
Location: Union City Georgia USA

Re: Illegal redistribution by windowsactivator.net (likely malware too)

Post by billmcct » 2025-03-11, 17:15

It has been removed by MediaFire.
--------------------------------------------------------------------------------------------------------------
Dell Precision 15 7550
Windows 10 Pro. 22H2 19045.5965
Xeon W-10885M Comet Lake
64 GB DDR4 ECC memory (128 GB max)
1 TB Samsung 9100 Pro M2 SSD (Main)
2 TB Samsung 9100 Pro M2 SSD (storage)
500 GB Corsair T500 storage M2 SSD (6 TB max)
Intel UHD onboard GPU 1080p
Quadro RTX 5000 Max-Q GPU 4K

Pale Moon 34.x.x - x64 AVX2 build

The difference between the Impossible and the Possible lies in a man's Determination.
Tommy Lasorda

User avatar
Moonchild
Project founder
Project founder
Posts: 39305
Joined: 2011-08-28, 17:27
Location: Sweden

Re: Illegal redistribution by windowsactivator.net (likely malware too)

Post by Moonchild » 2025-03-11, 17:39

Massacre wrote:
2025-03-11, 16:51
It is obvious that "Pale Moon crack serial key" will point only to malware.
To you and me, perhaps, not to people who have only heard about Pale Moon from recent news and think they can get a "Pro" version or what not this way :P
billmcct wrote:
2025-03-11, 17:15
It has been removed by MediaFire.
Yes, I was about to post about that here as I received a response to my own ticket with mediafire, them confirming it was removed for violating their terms.
"Praise from a narcissistic person is always a poison dart. They don't share the stage, so discernment matters." - Dr. Ramani
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
jobbautista9
Board Warrior
Board Warrior
Posts: 1194
Joined: 2020-11-03, 06:47
Location: Philippines

Re: Illegal redistribution by windowsactivator.net (likely malware too)

Post by jobbautista9 » 2025-03-11, 23:56

Yeah I got a quick response to my email as well 9 hours after I sent mine. Good work for them! :thumbup:
Image

Tired of creating stuff!

Avatar artwork by Shinki669: https://www.pixiv.net/artworks/113645617

XUL add-ons developer. You can find a list of add-ons I manage at http://rw.rs/~job/software.html.