{"id":1544,"date":"2014-08-25T12:25:23","date_gmt":"2014-08-25T12:25:23","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=1544"},"modified":"2018-05-29T12:02:03","modified_gmt":"2018-05-29T12:02:03","slug":"plugin-update-sl-warning","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/plugin-update-sl-warning\/","title":{"rendered":"Plugin Update SL – Warning! Stay away from this file"},"content":{"rendered":"

I’m in a hurry here, trying to wrap up the v1.12 release of FreeFixer<\/a>, but I though I must write a few lines of about a file, digitally signed by\u00a0Plugin Update SL<\/strong>, that was promoted as a Java update. Here’s how the ad appeared:<\/p>\n

\"plugin<\/a><\/p>\n

When clicking on the ad, a download for something called Player_Setup.exe<\/a> appeared. That file, is not<\/strong> a Java Update.<\/p>\n

\"Plugin<\/a><\/p>\n

The file is digitally signed by\u00a0Plugin Update SL<\/strong>, which is a company that appears to be located on Tenerife, and if you run the file, it will start an installation of something called NewPlayer<\/a>.\u00a0During the installation, it offers lots of bundled unwanted software, such as Findopolis<\/a>, FreeSoftToday<\/a>, IStartSurf<\/a>, etc, etc.<\/p>\n

The VirusTotal<\/a> scan also clearly shows why you should stay away from the\u00a0Plugin Update SL\u00a0<\/strong>malware file:<\/p>\n

\"Plugin<\/a><\/p>\n

Some of the scanners report it as DomaIQ<\/strong> and SoftPulse<\/strong>.<\/p>\n

Did you also find a file signed by Plugin Update SL<\/strong>? Was it also promoted as a Java update?<\/p>\n

If you installed any of the bundled software, you can remove those with FreeFixer<\/a>.<\/p>\n

Hope this helped you avoid the\u00a0Plugin Update SL\u00a0<\/strong>software. Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

I’m in a hurry here, trying to wrap up the v1.12 release of FreeFixer, but I though I must write a few lines of about a file, digitally signed by\u00a0Plugin Update SL, that was promoted as a Java update. Here’s how the ad appeared: When clicking on the ad, a download for something called Player_Setup.exe … Continue reading Plugin Update SL – Warning! Stay away from this file<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3,54,16,19],"tags":[92,152,117],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1544"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=1544"}],"version-history":[{"count":6,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1544\/revisions"}],"predecessor-version":[{"id":2743,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1544\/revisions\/2743"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=1544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=1544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=1544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}