installer Archives

Tech Optimizer

April 13, 2026

Fake Claude site installs malware that gives attackers access to your computer

Claude, an AI tool developed by Anthropic, receives nearly 290 million web visits monthly and has become a target for cybercriminals. A fake website has been found that impersonates Claude, distributing a trojanized installer named Claude-Pro-windows-x64.zip. This installer, while appearing legitimate, deploys PlugX malware, granting attackers remote access to users' systems. The fraudulent site mimics the official download page and uses passive DNS records linked to commercial bulk-email platforms, indicating active maintenance by the operators. The ZIP file contains an MSI installer that incorrectly spells "Claude" as "Cluade" and creates a desktop shortcut that launches a VBScript dropper. This script runs the legitimate claude.exe while executing malicious activities in the background, including copying files to the Windows Startup folder to ensure persistence after reboot. The attack utilizes a DLL sideloading technique recognized by MITRE as T1574.002, where a legitimate G DATA antivirus updater is exploited with a malicious DLL. Within 22 seconds of execution, the malware establishes a connection to an IP address associated with Alibaba Cloud, indicating control over the compromised system. The dropper script also employs anti-forensic measures to delete itself and the VBScript after deployment. Indicators of compromise include the filenames Claude-Pro-windows-x64.zip, NOVUpdate.exe, avk.dll, and NOVUpdate.exe.dat, along with the network indicator 8.217.190.58:443 (TCP) as the command and control destination. Users are advised to download Claude only from the official site and to remain vigilant against potential compromises.

AppWizard

April 10, 2026

These two huge PC performance app downloads have been infected by a virus

The download pages for CPU-Z and HWMonitor have been compromised, redirecting users to malware-infected files. Users should verify that downloaded files are named "hwmonitor1.63.exe" or "cpu-z2.19-en.exe" and be cautious of files like "HWiNFOMonitorSetup.exe." A virus scan is recommended, as Windows Defender has flagged the compromised versions. The malicious files were identified approximately nine hours ago, indicating a successful attack on the CPUID download site. The correct download links have been restored, but CPUID has not issued an official statement. The breach was reported by a Reddit user who experienced a warning from Windows Defender after downloading a suspicious file. CPUID's website and social media have not been updated since 2024, and users are advised to stay vigilant.

Winsage

April 9, 2026

This fake Windows support website delivers password-stealing malware

A phishing campaign has been identified that uses a counterfeit Microsoft support website, microsoft-update[.]support, to trick users into downloading a malicious Windows update disguised as WindowsUpdate 1.0.0.msi. This file, created on April 4, 2026, appears legitimate but contains malware designed to steal sensitive information. The campaign targets French-speaking users, leveraging recent data breaches in France to create convincing scams. The malware, once executed, installs an Electron application that runs a Python interpreter, which then deploys various data theft tools. It employs two persistence mechanisms: modifying the Windows registry and creating a shortcut in the Startup folder. The malware connects to external sites for reconnaissance and data exfiltration, using domains like datawebsync-lvmv.onrender[.]com and store8.gofile[.]io. The malware's components have evaded detection by antivirus tools, with VirusTotal reporting zero detections for the main executable and its launcher. Users are advised to check their registry, remove suspicious files, change passwords, and run a full system scan if they suspect installation of the malicious update. Safe updating practices include using the built-in Windows update feature and being cautious of phishing attempts. Indicators of compromise include specific file hashes, domains associated with the phishing campaign, and file system artifacts related to the malware's installation.

Winsage

April 8, 2026

“Wait, Windows uses less?”: I break down the surprising requirement that flips the Linux vs. Windows script

Ubuntu 26.04 LTS, developed by Canonical, will be released on April 23, 2026, with updated desktop requirements of a 2GHz dual-core processor, 6GB of RAM, and 25GB of storage. Unlike Windows 11, which enforces strict minimum requirements, Ubuntu allows installation on lower-spec machines, though performance may be compromised. The new requirements reflect a shift away from supporting older hardware, as the operating system incorporates a modern desktop stack with updated GNOME components and Wayland support. Ubuntu's installer evaluates hardware capabilities but does not block installation on unsupported devices, contrasting with Windows 11's rigid installation process that requires specific hardware features like TPM 2.0 and Secure Boot.

Winsage

April 8, 2026

Google shares simple fix for millions of Windows 10 users

Google, in collaboration with refurbished electronics retailer Back Market, is offering a USB memory stick that allows users to install ChromeOS Flex for free, providing an alternative to Windows 10 and addressing the end of support for the operating system. The ChromeOS Flex USB Kit simplifies the installation process and aims to extend the lifespan of aging PCs, potentially preventing millions of functioning devices from being discarded. As of October 14, 2025, Microsoft ceased all support for Windows 10, leaving vulnerabilities unaddressed. Approximately one-third of Windows devices still run on Windows 10, and users can opt for an additional year of updates at a cost of around £22. ChromeOS Flex has lower system requirements than Windows 11 but lacks features like Android app installation. It helps ensure security updates for existing devices and contributes to environmental sustainability by reducing electronic waste and carbon emissions associated with new device manufacturing. The physical kit is priced at around €3 and is reusable.

Winsage

April 8, 2026

Microsoft Rolls Out New Defender Update for Windows 11, 10, and Server Images

Microsoft released a security intelligence update for Microsoft Defender Antivirus on April 7, 2026, enhancing protection for Windows 11, Windows 10, and Windows Server. The update introduces refined threat detection capabilities to combat malware and zero-day attacks, utilizing advanced detection logic and cloud-based protection. The security intelligence version is 1.447.209.0, engine version is 1.1.26020.3, and platform version is 4.18.26020.6. Updates are automatically delivered via Windows Update, but can also be manually initiated or deployed using standalone installer packages. The update supports legacy platforms, including Windows 7 and Windows 8.1, provided they have SHA-2 code signing support enabled. Additionally, updates to the Network Inspection System (NIS) are available for certain environments.

Winsage

April 6, 2026

The new Copilot app for Windows 11 is really just Edge in disguise

Microsoft's new Copilot application for Windows 11 operates as a hybrid web application that essentially launches Microsoft Edge, functioning more as a rebranded browser wrapper than a standalone AI assistant. The installation replaces the previous native Copilot app with a version that includes Microsoft Edge files, such as msedge.exe and msedge.dll, within a WebView2 container. A user demonstrated that renaming the Copilot executable to msedge.exe allowed it to launch Microsoft Edge directly. Microsoft has expressed a goal to develop 100% native applications for Windows 11, but it is unclear if this will apply to the current Copilot.

Winsage

April 6, 2026

Android Emulator for Low-End PC: 6 Best Picks + Run Windows Apps (2026)

A significant portion of users in India and South Asia still rely on older devices, including laptops with 2GB to 4GB of RAM and entry-level Android phones. Many mainstream Android emulators require 4–8 GB of RAM, VT support, and a dedicated GPU, but there are options designed for lower-end machines. 1. MuMu Nebula: Best for ultra-low-end PCs, requires 2GB RAM, dual-core CPU, no GPU needed, supports Android 12, and has a startup time of around three seconds. 2. LDPlayer 9: Best for gaming on budget hardware, requires 2GB RAM (4GB recommended), dual-core processor, supports Android 9/11, and features a game booster mode. 3. NoxPlayer Lite: Supports multiple Android versions (5, 7, and 9), requires 2GB RAM, basic GPU, and has a startup time of about six seconds. 4. BlueStacks 5 (Eco Mode): Requires 4GB RAM (2GB works but barely), VT required, supports Android 11, and has extensive app compatibility. 5. GameLoop: Best for Tencent games, requires 4GB RAM, no VT needed, supports Android 7.1. 6. MEmu Play: Requires 2GB RAM, recommended for multitasking and developers, supports Android 7, 9, 11. For running Windows apps on Android, tools include: 1. ExaGear: A Windows emulator for Android that supports 32-bit applications and games, requires a specific setup process. 2. Winlator: A newer emulator that supports both 32-bit and 64-bit applications, particularly good for 3D games, with a simpler installation process. Tips for improving emulator performance include closing background apps, enabling virtualization in BIOS, lowering resolution and FPS caps, setting process priority to high, disabling Windows visual effects, and using an SSD for faster load times.

AppWizard

April 6, 2026

How to Play Division Resurgence on PC: Full Emulator Setup Guide

The Division Resurgence is a mobile-exclusive third-person shooter developed by Ubisoft, currently without an official PC client. Players can use three Android emulators—BlueStacks, MuMu Player, and LDPlayer—to play the game on larger monitors. Each emulator has distinct advantages: MuMu Player is recommended for PS controller users due to accurate button prompts, while LDPlayer is noted for better performance. For BlueStacks, players should download the Pie 64-bit version, adjust performance settings to maximize CPU and RAM, set graphics to Vulkan, and ensure the most recent phone profile is selected. For MuMu Player, users should set graphics to Vulkan, optimize performance settings, and select the ROG Phone 9 profile for better visuals. LDPlayer requires users to set CPU to 6 cores and RAM to at least 6 GB, with a resolution of 1280 × 720 and High FPS Mode enabled. In-game graphics settings for optimal performance include Very High graphics, High resolution, and a standard framerate capped at 30 FPS. The game supports both mouse and keyboard and gamepad controls, with options for customizing key bindings. Common issues include game freezes, crashes, low FPS, and incorrect controller prompts, with suggested fixes provided. Division Resurgence is free-to-play, and while not officially available on PC, it can be played through emulators without additional costs.

Winsage

April 5, 2026

New Copilot for Windows 11 includes a full Microsoft Edge package, uses more RAM

A new iteration of Copilot is being released for Windows 11, transitioning from native code (WinUI) to web components and including a full version of Microsoft Edge. The update replaces the previous native app and is available for download through the Microsoft Store, which now requires an installer similar to the Microsoft Edge installer. The new Copilot resembles the web version and has higher RAM usage, consuming up to 500MB in the background and nearly 1GB during use, compared to less than 100MB for the previous version. The new Copilot is a hybrid web application that operates with a rebranded instance of Edge within a WebView2 container, including a complete Microsoft Edge installation that occupies approximately 850 MB. It contains the msedge.dll file, confirming the presence of a full Chromium browser engine, and includes Edge subsystems like Browser Helper Objects and Trust Protection Lists. The Copilot app functions as a web app rendered via WebView2, raising questions about the necessity of such applications on Windows 11 given the existing alternatives.