InstallCore is a kind of installer where you have to click "Decline" (instead of Next/Accept) to continue installation... Installers from SourceForge.net are not affected. Yes, SF is now more trusty than some original project sites.