{"id":5249,"date":"2015-03-12T10:57:08","date_gmt":"2015-03-12T10:57:08","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=5249"},"modified":"2018-05-29T11:58:36","modified_gmt":"2018-05-29T11:58:36","slug":"next-point-ooo-anti-virus-detection-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/next-point-ooo-anti-virus-detection-installcore\/","title":{"rendered":"NEXT-POINT (OOO Next-Point) – 7% Anti-Virus Detection Rate – InstallCore"},"content":{"rendered":"

Hi there! Just a short post on a publisher called NEXT-POINT (OOO Next-Point)<\/strong>. I just found a download named adobe_flash_setup.exe that was digitally by this publisher, and it turns out that it is detected by some anti-virus programs.<\/p>\n

\"NEXT-POINT<\/a><\/p>\n

You can also check the digital signature under the file’s properties. According to the certificate we can see that NEXT-POINT (OOO Next-Point) seems to be located in Moscow, Russia and that the certificate is issued by COMODO RSA Code Signing CA.<\/p>\n

\"NEXT-POINT<\/a><\/p>\n

The problem is that adobe_flash_setup.exe is not an official Adobe Flash Player download. If it was, it would have been digitally signed by Adobe Systems Incorporated<\/strong>. Here’s how the authentic Adobe Flash Player<\/strong> looks like when you double click on it. Notice that the “Verified publisher” says “Adobe Systems Incorporated”.
\n\"Adobe<\/a><\/p>\n

The current detection rate is 4\/57, that is 7%. Avira reports adobe_flash_setup.exe as Adware\/InstallCore.A.499<\/strong>, ESET-NOD32 detects it as a variant of Win32\/InstallCore.XP potentially unwanted<\/strong> and K7AntiVirus reports Trojan ( 004b75ec1 )<\/strong>.<\/p>\n

\"NEXT-POINT<\/a><\/p>\n

When I tested the NEXT-POINT (OOO Next-Point) file it installed StormFall<\/a> and MyPC backup on some product from Symantec. Don’t remember the name. Perhaps it was Norton 360.<\/p>\n

Did you also find a file signed by NEXT-POINT (OOO Next-Point)? What kind of download was it and where did you find it?<\/p>\n

Hope this blog post helped you avoid some unwanted software on your machine.<\/p>\n

Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hi there! Just a short post on a publisher called NEXT-POINT (OOO Next-Point). I just found a download named adobe_flash_setup.exe that was digitally by this publisher, and it turns out that it is detected by some anti-virus programs. You can also check the digital signature under the file’s properties. According to the certificate we can … Continue reading NEXT-POINT (OOO Next-Point) – 7% Anti-Virus Detection Rate – InstallCore<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5249"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=5249"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5249\/revisions"}],"predecessor-version":[{"id":5254,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5249\/revisions\/5254"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=5249"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=5249"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=5249"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}