http://www.giveawayoftheday.com/forums/ Giveaway of the Day Forums Topic: Evernote trying to connect to a possible spam site. en Sun, 07 Sep 2008 01:01:56 +0000 http://www.giveawayoftheday.com/forums/topic/1955#post-12749 Sat, 08 Dec 2007 17:54:21 +0000 RunesageMagik 12749@http://www.giveawayoftheday.com/forums/ <p>BTW: cports = currports<br /> Forgot to add that I like Sygate because from the i/o Log I can click BackTrace and follow the traceroute hops. However, to resolve some IP/Domain Names on the other regional db's, I've a folder with all the shortcuts-<br /> <a href="http://www.apnic.net/" rel="nofollow">http://www.apnic.net/</a><br /> <a href="http://www.arin.net/whois/" rel="nofollow">http://www.arin.net/whois/</a><br /> <a href="http://www.internic.net/whois.html" rel="nofollow">http://www.internic.net/whois.html</a><br /> <a href="http://lacnic.net/cgi-bin/lacnic/whois?lg=EN" rel="nofollow">http://lacnic.net/cgi-bin/lacnic/whois?lg=EN</a><br /> <a href="http://www.ripe.net/perl/whois/" rel="nofollow">http://www.ripe.net/perl/whois/</a><br /> <a href="http://thebigwhois.com/" rel="nofollow">http://thebigwhois.com/</a><br /> <a href="http://www.geektools.com/whois.php" rel="nofollow">http://www.geektools.com/whois.php</a><br /> <a href="http://www.archive.org/web/web.php" rel="nofollow">http://www.archive.org/web/web.php</a><br /> <a href="http://www.iana.org./faqs/abuse-faq.htm#HintsforFindingaPersonResponsibleforaGivenIPv4Address" rel="nofollow">http://www.iana.org./faqs/abuse-faq.htm#HintsforFindingaPersonResponsibleforaGivenIPv4Address</a><br /> <a href="http://www.karenware.com/powertools/ptwhois.asp" rel="nofollow">http://www.karenware.com/powertools/ptwhois.asp</a> </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12747 Sat, 08 Dec 2007 17:33:02 +0000 RunesageMagik 12747@http://www.giveawayoftheday.com/forums/ <p>I concur... CPorts offers more info than does my SyGate Firewall scan of applications running and its inbound/outbound Log page.<br /> Here are a few related links -</p> <p><a href="http://www.nirsoft.net/utils/cports.html" rel="nofollow">http://www.nirsoft.net/utils/cports.html</a><br /> <a href="http://www.wilderssecurity.com/showthread.php?t=187116" rel="nofollow">http://www.wilderssecurity.com/showthread.php?t=187116</a><br /> <a href="http://www.wilderssecurity.com/showthread.php?t=161899" rel="nofollow">http://www.wilderssecurity.com/showthread.php?t=161899</a><br /> <a href="http://mabsoft.com/index.htm" rel="nofollow">http://mabsoft.com/index.htm</a> </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12746 Sat, 08 Dec 2007 16:15:48 +0000 WeyrleaderZor 12746@http://www.giveawayoftheday.com/forums/ <p>One of the best tools for determining what is talking when and to whom is the Microsoft System Internals "Current Ports" ("CurrPort" I think is the short version of the name). It has a feature to not only show foreign IP addresses being talked to (and on which ports) but an option to activate IP-Domain Name resolution (if you use it will show the address like so: 64.233.167.104 [Google.com]).</p> <p>That is a free utility (as are all the System Internals - they SHOULD be part of everyone's troubleshooting/system security &#38; maintenance tool set). </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12276 Wed, 28 Nov 2007 07:11:21 +0000 slgraycols 12276@http://www.giveawayoftheday.com/forums/ <p>Coffindweller, I just installed Comodo after reading your first post about Evernote trying to connect ( I did some research and am just realizing that Windows firewall I've been using for the past year wasn't sufficient) I still am trying to understand Comodo so I don't know how to determine the answers to those questions. I can't imagine they are doing anything shifty as they seem to be reputable and the program is just so good. Also I believe they are working with the OpenOffice project, I saw their name listed somewhere among the OpenOffice pages. </p> <p>I investigated some of Evernotes forums and here is one link to a thread about this topic <a href="http://forum.evernote.com/phpbb/viewtopic.php?f=3&#38;t=412" rel="nofollow">http://forum.evernote.com/phpbb/viewtopic.php?f=3&#38;t=412</a><br /> I don't believe anyone ever really answers the question definitively in that thread but one suggestion is that Evernote is trying to update itself and to turn the update function off. But I had had my update turned off all along and it still tries to connect. </p> <p>The other suggestion that stood out to me is that someone said that Evernote has to download the images when you save one from the web. Apparently also, if you shut down the connection, you may not get the images or links to show up in the clipping. I noticed today when I clipped a note that had a lot of links in it, it asked me to allow it to connect. Another user says that Evernote continuously tries to maintain a connection with the company that makes it. There was another explanation I don't know enough about to quite understand but sounded like some kind of issue they plan on fixing later on. I don't know how to figure out if it's connecting to packagelive or not. </p> <p>I know Evernote will send popup notices sometimes when they have a special on their product. I was using the free version before getting the paid one and a couple of weeks before the GAOTD offering, I received popup notices when starting the application that there was a new version out and they were offering 50% off, so maybe that is why they have it seeking a connection to the company that makes it. I don't know if that could have anything to do with it.</p> <p>I like the Evernote program too much and I feel enough trust in it not to worry, but now I am worrying about other programs on my computer. I just have to figure out what all the messages I'm getting from Comodo mean, but I wanted to thank you for that post because I would've just been roaming around in lala land with my windows firewall getting more problems. My next step is to find a good free anti virus because apparently Yahoo's doesn't work as I've found two viruses through spybot and windows defender in the past two weeks. </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12272 Wed, 28 Nov 2007 06:45:26 +0000 RunesageMagik 12272@http://www.giveawayoftheday.com/forums/ <p>For the record, my firewall also stopped Evernote from dialing out. Sorry I didn't make a note of where the beacon was aimed, I just blocked Evernote from ever getting past the firewall. It's a troubling trend to see so many programs created with automatic dial out processes, as if the barn door should be left wide open so any program we download can come and go as it pleases. Some claim they're just checking for updates /even if an update will destroy the free version gaotd provided/ while others don't even warn a user or offer a disable option. Who knows what kind of data packets are being exchanged? If more and more people give these programs carte blanc to dial out and download 'updates' and modify computer systems, sooner or later someone's going to discover their horses have escaped and they're the proud owner of stalls full of manure. </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12265 Wed, 28 Nov 2007 04:48:10 +0000 FreewareFan 12265@http://www.giveawayoftheday.com/forums/ <p>I took advantage of the GAOTD offer for EverNote, and installed it when it was available a couple of weeks ago.</p> <p>I also use Comodo Firewall Pro, version 3.0.13.268 . It reports that EverNote, when up and running, does a listen on port 10200 of the TCP variety. I have no record that it has ever tried to connect with packagelive.com, however. </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12264 Wed, 28 Nov 2007 04:33:59 +0000 NolafromNZ 12264@http://www.giveawayoftheday.com/forums/ <p>Hi,</p> <p>I purchased Evernote just recently after using the free version for about 15 months and I have never, ever had a problem with Evernote trying to connect to packagelive.com or anyone else, except itself. This company is extremely proactive and update their software all the time, so every few weeks I get a message asking me to update. Well, I did while I was using the free version, and I went up 3 or 4 versions during the 15 months I had it. Like I say, I have never had anything untoward happen with this product, and I use it extensively. So, I don't have the GOTD version of it, since I paid for it 2 weeks beforehand (isn't that typical!)but I would recommend this product one hundred percent. (I use Comodo Firewall Pro by the way) </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12250 Wed, 28 Nov 2007 00:20:58 +0000 Whiterabbit-uk 12250@http://www.giveawayoftheday.com/forums/ <p>No it's not unique. I also get Evernote trying to connect to the internet, but I always block it. I really like the program, so have put up with the intrusion so far, but it does get a little wearing having to block it every time I boot up the computer. I use F-Secure. I haven't bothered reading about all the tools etc that I get with F-secure. It's been a great package as since I installed it originally a few years ago I've never had to bother with it. (i.e. ideal for newcomers to the world of cyber space)<br /> The fact that you have taken the time to research the issue is much appreciated. I'm quite disappointed that this has been allowed to get through the net. I'm sure the giveaway team had no clue about this though. Who to blame???? </p> <p>This is one of the rare software’s that I actually download these days and it's been under trial with a view to buying it, but this fact that the site is adware puts me off somewhat. I do hope the developer will explain why the adware has been included. This would at least show me that they care about their product and the consumer; which is something I try to take account of when I'm buying software. </p> <p>eg,<br /> Shortly after getting wire changer several months ago; I lost it, but had been so impressed with it (okay Vista can do most of what wire changer can do, but wire changer doesn't mess with all my software or crash my computers - that is the two I've installed and then uninstalled it on, lol) that I decided to buy it. I made a mistake on the web order, and accidentally ordered wire keys. On discovering this (after receiving the wire keys reg code) I immediately contacted the developer and was given the reg code for wire changer and was also told to keep the full version of wire keys as well. This is the sort of developer I like. :) although the software has to be good as well. </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12245 Tue, 27 Nov 2007 21:54:15 +0000 BuBBy 12245@http://www.giveawayoftheday.com/forums/ <p>Just wondering - have you saved any content in Evernote (like a webpage) that might have an advertisement or a script that might be trying to connect to that particular website?</p> <p>I've been using Evernote and haven't seen anything like what you have experienced. Normally if there was a problem like this, I'd expect to see a dozen people confirming the same problem on their PCs, but seems to be unique to your install.</p> <p>Could you check if there is any reference to packagelive.com in any of your "notes"? </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12244 Tue, 27 Nov 2007 21:41:53 +0000 coffindweller 12244@http://www.giveawayoftheday.com/forums/ <p>slgraycols, That is the only site that Evernote tried to connect to. I permanently blocked Evernote from accessing the internet. Does your firewall keep logs of connection attempts or have that option that you can turn on and look to see where Evernote is trying to connect?? If not, there are programs that will do this but I am not familiar with them. </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12169 Mon, 26 Nov 2007 11:45:21 +0000 slgraycols 12169@http://www.giveawayoftheday.com/forums/ <p>Coffindweller, please if you get any more info on this, post it here. I just today installed Comodo Firewall and it tells me that evernote has attempted to connect to the internet but I don't know if it's to packagelive.com or not. </p> http://www.giveawayoftheday.com/forums/topic/1955#post-12028 Fri, 23 Nov 2007 02:11:38 +0000 coffindweller 12028@http://www.giveawayoftheday.com/forums/ <p>I installed Evernote a few days ago. On my 1st system restart my firewall caught Evernote attempting to contact packagelive.com, which I blocked. I restarted Evernote and the firewall caught it trying to contact packagelive.com again. I performed the same steps a number of times with the same results each time. This is what my firewall reported:</p> <p>EverNote application (EverNote.exe) is trying to connect to packagelive.com (66.232.125.245) using remote port 80 (HTTP - World Wide Web). Do you want to allow this program to access the network.</p> <p>I attempted to open a browser window to packagelive.com to see what the site was but I only get a 'Page Not Found'. I googled packagelive.com and found that packagelive is an advertising company. packagelive.com/unsub gives an 'object not found'. So the website is active. I found an unsubscribe notice from packagelive.com that stated:</p> <p>To unsubscribe please go here<br /> or send mail to:<br /> 2620 S. Maryland Parkway #859 - A<br /> Las Vegas, NV 89109</p> <p>WebExperiment WebExperiment of Windsor,CO you have received this because you signed up to receive offers from packagelive.com and/or through one of our partners. You signed up on with the following IP address 71.218.57.35 . To block your email &lt;email removed&gt; from future mailings please click here. </p> <p>We apologize for any inconvenience.</p> <p>Travel<br /> 427 E.17th Street #142<br /> Costa Mesa, CA 92627</p> <p>Clicking on the link opens a browser window that says:</p> <p>Unsubscribe</p> <p>This user is now prevented from receiving any email from this server.</p> <p>There is also a "Click here to report abuse." link to "mailto:abuse@packagelive.com"</p> <p>There is nothing in Evernote's EULA about this.</p> <p>I have asked Evernote to explain this.</p> <p>I permanently blocked Evernote from accessing the internet. As packagelive.com wasn't listed with spywareblaster, I manually added the site into my host file, with 0.0.0.0 redirect, and then submitted the site to javacoolsoftware's website. </p>