{"id":701,"date":"2014-05-29T19:34:24","date_gmt":"2014-05-29T19:34:24","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=701"},"modified":"2018-05-29T12:02:52","modified_gmt":"2018-05-29T12:02:52","slug":"installvibes-digital-signature","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/installvibes-digital-signature\/","title":{"rendered":"InstallVibes Digital Signature &#8211; Bundling, VirusTotal detections and Promotions"},"content":{"rendered":"<p>I just found a file digitally signed by <strong>InstallVibes<\/strong>. You might have noticed that\u00a0<strong>InstallVibes<\/strong> appears as the publisher in the User Account Control dialog that pops up when double-clicking on the file and came here to find more about it.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-publisher.png\"><img loading=\"lazy\" class=\"alignnone wp-image-704 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-publisher.png\" alt=\"InstallVibes Publisher\" width=\"481\" height=\"275\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-publisher.png 481w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-publisher-300x171.png 300w\" sizes=\"(max-width: 481px) 100vw, 481px\" \/><\/a><\/p>\n<p>Information about a digital signature and the certificate can also be found under the Digital Signature tab. The two screenshots below shows the\u00a0<strong>InstallVibes<\/strong> certificate and that the &#8220;Subject&#8221; is located in Tel Aviv, Israel.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-certificate.png\"><img loading=\"lazy\" class=\"alignnone wp-image-702 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-certificate.png\" alt=\"InstallVibes Digital Signature\" width=\"428\" height=\"283\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-certificate.png 428w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-certificate-300x198.png 300w\" sizes=\"(max-width: 428px) 100vw, 428px\" \/><\/a><\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-certificate-telaviv-israel.png\"><img loading=\"lazy\" class=\"alignnone wp-image-703 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-certificate-telaviv-israel.png\" alt=\"InstallVibes Certificate TelAviv Israel\" width=\"431\" height=\"447\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-certificate-telaviv-israel.png 431w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-certificate-telaviv-israel-289x300.png 289w\" sizes=\"(max-width: 431px) 100vw, 431px\" \/><\/a><\/p>\n<p>I decided to upload the <strong>InstallVibes<\/strong> file to VirusTotal. The\u00a0file was detected by some of the anti-virus programs, with names such as:\u00a0<strong>TR\/Dropper.Gen<\/strong>,\u00a0<strong>PUP.Optional.Bundlore<\/strong> and\u00a0<strong>Bundlore<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-virustotal.png\"><img loading=\"lazy\" class=\"alignnone wp-image-705 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-virustotal.png\" alt=\"InstallVibes scan result from Virus Total\" width=\"702\" height=\"386\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-virustotal.png 702w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-virustotal-300x164.png 300w\" sizes=\"(max-width: 702px) 100vw, 702px\" \/><\/a><\/p>\n<p>Since some of the anti-virus programs detected the <strong>InstallVibes<\/strong> file, I got curious\u00a0and decided to test it to see what it installed. The following software is bundled and disclosed in the <strong>InstallVibes<\/strong> installer:<\/p>\n<ul>\n<li>Qone8<\/li>\n<li>ProductivityPro<\/li>\n<li>Optimizer Pro<\/li>\n<li>Wajam<\/li>\n<li>BestMarkit<\/li>\n<li>MoboGenies<\/li>\n<li>PriceMeter<\/li>\n<li>OMG (OnlineMusicGroove)<\/li>\n<li>ClipHD<\/li>\n<li>MyPcBackup<\/li>\n<\/ul>\n<p>This is how the web page looked like when I found the <strong>InstallVibes<\/strong> file. It appeared in a few variants:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-video-downloader.png\"><img loading=\"lazy\" class=\"alignnone wp-image-737 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-video-downloader.png\" alt=\"InstallVibes Video Downloader\" width=\"925\" height=\"575\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-video-downloader.png 925w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-video-downloader-300x186.png 300w\" sizes=\"(max-width: 925px) 100vw, 925px\" \/><\/a> <a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-highly-recommened.png\"><img loading=\"lazy\" class=\"alignnone wp-image-735 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-highly-recommened.png\" alt=\"InstallVibes &quot;Highly Recommened&quot;\" width=\"921\" height=\"571\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-highly-recommened.png 921w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-highly-recommened-300x185.png 300w\" sizes=\"(max-width: 921px) 100vw, 921px\" \/><\/a> <a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-download-ready.png\"><img loading=\"lazy\" class=\"alignnone wp-image-734 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-download-ready.png\" alt=\"InstallVibes &quot;Download Ready&quot; using user interface that looks like the Windows 7 user interface style.\" width=\"1065\" height=\"569\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-download-ready.png 1065w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-download-ready-300x160.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/installvibes-download-ready-1024x547.png 1024w\" sizes=\"(max-width: 1065px) 100vw, 1065px\" \/><\/a><\/p>\n<p>Did you also find an\u00a0<strong>InstallVibes<\/strong> file? What kind of download was it?<\/p>\n<p>If you also have a file digitally signed by <strong>InstallVibes<\/strong>, please upload at <a href=\"http:\/\/www.virustotal.com\">www.virustotal.com<\/a> to see if anything is detected or if it comes up clean. I&#8217;d be very interested to see the scan result. Please post the link to the scan result in the comments field below. Thank you!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I just found a file digitally signed by InstallVibes. You might have noticed that\u00a0InstallVibes appears as the publisher in the User Account Control dialog that pops up when double-clicking on the file and came here to find more about it. Information about a digital signature and the certificate can also be found under the Digital &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/installvibes-digital-signature\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">InstallVibes Digital Signature &#8211; Bundling, VirusTotal detections and Promotions<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[114,113,112],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/701"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=701"}],"version-history":[{"count":16,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/701\/revisions"}],"predecessor-version":[{"id":745,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/701\/revisions\/745"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=701"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=701"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=701"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}