{"id":3790,"date":"2015-01-06T21:58:58","date_gmt":"2015-01-06T21:58:58","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=3790"},"modified":"2018-05-29T12:01:07","modified_gmt":"2018-05-29T12:01:07","slug":"alpha-is-fried-cookie-ltd-14-detection-rate-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/alpha-is-fried-cookie-ltd-14-detection-rate-installcore\/","title":{"rendered":"Alpha IS (Fried Cookie Ltd.) &#8211; 14% Detection Rate &#8211; InstallCore"},"content":{"rendered":"<p>Hi there! Just wanted to give you heads-up on suspicious file I found right now. The file is named installer_jdownloader_English.exe and digitally signed by <strong>Alpha IS (Fried Cookie Ltd.)<\/strong>.<\/p>\n<p>According to the certificate, Alpha IS (Fried Cookie Ltd.) is located in Tel Aviv, Israel.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-IS-Fried-Cookie-Ltd.-cert.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3791\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-IS-Fried-Cookie-Ltd.-cert.png\" alt=\"Alpha IS Fried Cookie Ltd. cert\" width=\"531\" height=\"461\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-IS-Fried-Cookie-Ltd.-cert.png 531w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-IS-Fried-Cookie-Ltd.-cert-300x260.png 300w\" sizes=\"(max-width: 531px) 100vw, 531px\" \/><\/a><\/p>\n<p>So, why did I put up this blog post? Well, the thing is that the Alpha IS (Fried Cookie Ltd.) file is detected by some of the anti-malware scanners, according to <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>. Comodo reports installer_jdownloader_English.exe as <strong>Application.Win32.FriedCookie.CIRK<\/strong>, ESET-NOD32 detects it as <strong>a variant of Win32\/InstallCore.UW<\/strong>, K7AntiVirus detects it as <strong>Trojan ( 004b25f41 )<\/strong>, K7GW calls it <strong>Trojan ( 004b25f41 )<\/strong> and VIPRE detects it as <strong>InstallCore (fs)<\/strong><\/p>\n<p>Did you also find an Alpha IS (Fried Cookie Ltd.)? Do you remember the download link? Please post it in the comments below and I&#8217;ll upload it to <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a> to see if that one is also detected.<\/p>\n<p>Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi there! Just wanted to give you heads-up on suspicious file I found right now. The file is named installer_jdownloader_English.exe and digitally signed by Alpha IS (Fried Cookie Ltd.). According to the certificate, Alpha IS (Fried Cookie Ltd.) is located in Tel Aviv, Israel. So, why did I put up this blog post? Well, the &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/alpha-is-fried-cookie-ltd-14-detection-rate-installcore\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Alpha IS (Fried Cookie Ltd.) &#8211; 14% Detection Rate &#8211; InstallCore<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3790"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=3790"}],"version-history":[{"count":1,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3790\/revisions"}],"predecessor-version":[{"id":3792,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3790\/revisions\/3792"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=3790"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=3790"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=3790"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}