Kasperksy Detection

Every time that i update K-Lite, it detect Malware "PDM:Exploit.Win32.Generic"

05.12.2017 00.17.11;O objeto (memória do processo) detectado não pode ser desinfectado;c:\users\admin\appdata\local\temp\is-q09o0.tmp\klcp_update_1369_20171204.tmp;c:\users\admin\appdata\local\temp\is-q09o0.tmp\klcp_update_1369_20171204.tmp;PDM:Exploit.Win32.Generic;Outros malware;12/05/2017 00:17:11

That is an incorrect detection by Kaspersky. You should report the problem to them. There should be an option to submit the file for analysis.

https://www.virustotal.com/#/file/486b1e0dcfc32fcde7d12313127a4114930e9f7573354928258c5d77046f0ec2/detection

I just contacted Kaspersky support, waiting for a answer

I use Kaspersky for over a decade now and never had problems with K-Lite. Just installed the latest version and nothing was detected, both scanning the installation file and the files being installed in real time.
I know that K-lite also bundles things that might be flagged as malware/addware but doing an update skips those things afaik.

It is normal that you never had a problem. This is a false positive and those happen only rarely.

The offer that is shown during installation is not actually included in the installer. It is only downloaded after user approval. Plus it is only shown during the initial install, never during updates. K-Lite does not contain malware. The offer can at most be classified as "adware" due to its distribution method as a bundled offer. It is made a legitimate software company.

Admin wrote:It is normal that you never had a problem. This is a false positive and those happen only rarely.

The offer that is shown during installation is not actually included in the installer. It is only downloaded after user approval. Plus it is only shown during the initial install, never during updates. K-Lite does not contain malware. The offer can at most be classified as "adware" due to its distribution method as a bundled offer. It is made a legitimate software company.

Most Anti-virus software block bundled installers like OpenCandy and others now. It's really annoying since it's not that hard to decline, and you can always use https://unchecky.com/

K-Lite does not contain OpenCandy crap or any other third party code in the installer.

There is also registry tweak to disable the offer:

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\KLCP]
"NoOffers"=dword:00000001


Admin wrote:K-Lite does not contain OpenCandy crap or any other third party code in the installer.

There is also registry tweak to disable the offer:

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\KLCP]
"NoOffers"=dword:00000001


I think that if you deny the offer, you already get that registry key right? I've never had another offer after installing K-Lite for the first time on a fresh install.