{"id":3954,"date":"2015-01-17T15:11:24","date_gmt":"2015-01-17T15:11:24","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=3954"},"modified":"2018-05-29T12:01:03","modified_gmt":"2018-05-29T12:01:03","slug":"dove-source-fried-cooke-ltd-4-detection-rate-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/dove-source-fried-cooke-ltd-4-detection-rate-installcore\/","title":{"rendered":"Dove Source (Fried Cooke Ltd.) &#8211; 4% Detection Rate &#8211; InstallCore"},"content":{"rendered":"<p>Hello readers! Short on time today this weekend, but I just wanted to give you the heads up on a publisher called <strong>Dove Source (Fried Cooke Ltd.)<\/strong>. The signed file was named\u00a0<a href=\"http:\/\/www.freefixer.com\/library\/file\/Skype_Setup.exe-161429\/\">Skype_Setup.exe<\/a>.<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Dove-Source-Fried-Cooke-LTD-cert.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3957\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Dove-Source-Fried-Cooke-LTD-cert.png\" alt=\"Dove Source Fried Cooke LTD cert\" width=\"511\" height=\"441\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Dove-Source-Fried-Cooke-LTD-cert.png 511w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Dove-Source-Fried-Cooke-LTD-cert-300x258.png 300w\" sizes=\"(max-width: 511px) 100vw, 511px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>The certificate is rather new. It is valid from the 5th of January 2015. According to the cert, the company is located in Tel Aviv, Israel.<\/p>\n<p>The problem here is that if Skype_Setup.exe really was an installer for Skype, it should be digitally signed by <strong>Skype Software Sarl<\/strong> and not by some unknown company. Here&#8217;s how the <strong>authentic Skype<\/strong> looks like when you double click on it. Notice that the &#8220;Verified publisher&#8221; says &#8220;Skype Software Sarl&#8221;.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3425\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png\" alt=\"Skype Software Sarl publisher\" width=\"479\" height=\"277\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png 479w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher-300x173.png 300w\" sizes=\"(max-width: 479px) 100vw, 479px\" \/><\/a><\/p>\n<p>The issue with the Dove Source (Fried Cooke Ltd.) file, in addition to using Skype&#8217;s name, is that it is detected by a few of the anti-malware scanners. Here are some of the detection names: <strong>ADWARE\/InstallCore.Gen9<\/strong> and <strong>a variant of Win32\/InstallCore.UN<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Dove-Source-Fried-Cooke-Ltd.-virustotal.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3955\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Dove-Source-Fried-Cooke-Ltd.-virustotal.png\" alt=\"Dove Source (Fried Cooke Ltd.) virustotal\" width=\"616\" height=\"348\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Dove-Source-Fried-Cooke-Ltd.-virustotal.png 616w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Dove-Source-Fried-Cooke-Ltd.-virustotal-300x169.png 300w\" sizes=\"(max-width: 616px) 100vw, 616px\" \/><\/a><\/p>\n<p>Did you also find a Dove Source (Fried Cooke Ltd.) file? What kind of download was it?<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello readers! Short on time today this weekend, but I just wanted to give you the heads up on a publisher called Dove Source (Fried Cooke Ltd.). The signed file was named\u00a0Skype_Setup.exe. &nbsp; The certificate is rather new. It is valid from the 5th of January 2015. According to the cert, the company is located &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/dove-source-fried-cooke-ltd-4-detection-rate-installcore\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Dove Source (Fried Cooke Ltd.) &#8211; 4% Detection Rate &#8211; InstallCore<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[104,252,251],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3954"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=3954"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3954\/revisions"}],"predecessor-version":[{"id":3959,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3954\/revisions\/3959"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=3954"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=3954"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=3954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}