Also direct link is full of malware

[Bastardliner]

So, this is the result for Mirror 7:

https://www.virustotal.com/de/file/d7dea2819edc77bc44db637cd324e61942b54930cb3034f8f1a417b7dd27b514/analysis/1545489884/

 

This got to be a joke. What kind of malware shit are you offering right here?

 

[LIGHTNING UK!]

The installCore plugin is what offers the 3rd party apps during the setup wizard.

If you aren't interested in the offers, just opt out of them. Simple.