{"id":7318,"date":"2015-09-10T07:28:01","date_gmt":"2015-09-10T07:28:01","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=7318"},"modified":"2015-09-10T07:28:01","modified_gmt":"2015-09-10T07:28:01","slug":"safe-install-opt-28-detection-rate-pup-optional-bundle-outbrowse","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/safe-install-opt-28-detection-rate-pup-optional-bundle-outbrowse\/","title":{"rendered":"safe InStAll OPT – 28% Detection Rate – PUP.Optional.Bundle \/ OutBrowse"},"content":{"rendered":"

Hi there! Just wanted to give you the heads up on files digitally signed by safe InStAll OPT<\/strong>.<\/p>\n

\"safe<\/a><\/p>\n

You can see who the signer is when double-clicking on an executable file. safe InStAll OPT appears in the publisher field in the dialog that pops up. To get more details on the publisher, you can view the certificate by right-clicking on the file, and looking under the Digital Signatures tab. According to the certificate we can see that safe InStAll OPT appears to be located in Ireland and that the certificate is issued by thawte SHA256 Code Signing CA.<\/p>\n

\"safe<\/a><\/p>\n

Here’s Thawte in the certificate chain:<\/p>\n

\"safe<\/a><\/p>\n

When I uploaded the file to VirusTotal<\/a> – as I usually do when I find something that looks suspicious – 28% of the antivirus scanners detected the file. The file is detected as Downloader.USS<\/strong> by AVG, PUP.Optional.Bundle<\/strong> by Malwarebytes and Adware-OutBrowse.h<\/strong> by McAfee-GW-Edition.<\/p>\n

\"safe<\/a><\/p>\n

Did you also find a safe InStAll OPT file? What kind of download was it? If you remember the download link, please post it in the comments below.<\/p>\n

Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hi there! Just wanted to give you the heads up on files digitally signed by safe InStAll OPT. You can see who the signer is when double-clicking on an executable file. safe InStAll OPT appears in the publisher field in the dialog that pops up. To get more details on the publisher, you can view … Continue reading safe InStAll OPT – 28% Detection Rate – PUP.Optional.Bundle \/ OutBrowse<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[716],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7318"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=7318"}],"version-history":[{"count":1,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7318\/revisions"}],"predecessor-version":[{"id":7323,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7318\/revisions\/7323"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=7318"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=7318"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=7318"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}