Klite Codec Pack Update 15.2.3 is triggering AV

I just downoaded the Klite Codec Pack Update 15.2.3 and I immediately get a pop up from Windows warning me not to run the file. I've honestly never seen this error message before.




I have several browser plugins, one of which is called OPSWAT. It automatically scans everything I download and tells me if it's risky or not. OPSWAT identified the update as having a Trojan embedded by one single AV scanner.

Antiy-AVL

Trojan[Packed]/Win32.Dico

https://metadefender.opswat.com/results#!/file/bzE5MTAzMVMxTWNfSF9xU3J5eE1xdUhkNVM/regular/multiscan

So, I scanned it with Virustotal and got the same result.
https://www.virustotal.com/gui/file/83fab3a21cf28f593f8a17cfbb21536833a8a6cdec6a44efc498ee5a34b5565a/detection

I scanned it with Jotti's Malware scanner and it came back negative.
https://virusscan.jotti.org/en-US/filescanjob/2pwkmzc85e

So, I assume this is a false positive but it might also be triggering Windows because the file is not signed by the vendor. But, I thought I'd hold off on updating until I can get a response from the admins/authors of the project.

Thanks,
pogue

It is a false positive detection.

The smartscreen "error" can happen when the file is still very new. It doesn't mean that anything is wrong with the file, it only means it isn't a "known" file yet. It usually takes a few hours or a day before that stops.

Thanks for letting me know!