Just like the title said, everytime I try to download the installer, Kaspersky automatically quarantined and deleted it. Stated that the installer contains a Trojan. Never experienced this with other games from GOG. This is the first and the only one. Can somebody clarify? Thank you very much in advance

Search for "false positive".

Yeah, got the same thing. I'm confident there's nothing wrong with it, but Kaspersky was hard to persuade.

Came here because of the same issue, Glad im not the only one

I had this exact same problem. Kaspersky put up a mean fight but I was finally able to convince it the .exe file was not a Trojan, and was instead a nice safe file. Even when I went to their site and had the file scanned it came up as a known false positive.

Same here: Trojan Virus embedded in the game file! Thanks for nothing GOG; Zone Alarm Detected.

when KAV complains about the file, instead of delete, select block (or quarantine, depending on the access method) then open up kaspersky and go to the details, which will then give you the option to select "add exception"

if it's not available from that screen then "more tools" --> "quarantine" is where you need to go.

the difference iss behavior is dependent on how you got the file, downloading through galaxy I got hit with the first, but the second tends to happen if it intercepts a download or you try to run a download directly.

I shut off the anit-virus protection then downloaded the .exe file. Once it was finished I opened Kaspersky and set an exception. I turned the anti-virus back on and it finally left the file alone.

I found the file in Kaspersky quarantine. Trojan identified as Tojan.Win32.Reconyc.hvxj
It recommends against restoring it, and I am aware false positives occur, but how is it detecting such a specific trojan?
Kinda hesitant to restore it haha

I'm quite confident that the file is safe, and I also know what a "false positive" is. What got me wondered in the first place was, how can a GOG installer detected as / contained a trojan. Maybe GOG should inspect this further, since I don't want any other game installers having similar issue in the future.

..apparently it's now being picked up as "backdoor.win32.andom.nztq"....which is even more severe than the other detection type.... I got a screenie to prove it too...just check the attachments....

Also did a VT and JM scan too to see what other venders re saying about it and they have been grumbling alot recently: https://www.virustotal.com/#/file-analysis/MWE3NTNlNGY5YTIwOWRlNWJkOTE2YWM5OGI4OGE5Yjc6MTUwODE3MjgwNg== and https://virusscan.jotti.org/en-US/filescanjob/uv20hgsd9y

Hmmmmmmmmmmmm............ I have submitted a ticket with support and hopefully this'll be fixed soon...


==================================================
Filename : setup_deadlight_directors_cut_2.0.0.2.exe
MD5 : 1a753e4f9a209de5bd916ac98b88a9b7
SHA1 : 975734c7168a23d03b0f63df3c8d380b8c70b6be
CRC32 : f3dc6291
SHA-256 : 2c8359573576899e1899d222b5e87bcf91472a358268fb1ab4aa833b6baa8822
SHA-512 : fda38dcc62c7b4002797e8b9215848fe7d257b9a89ad1214545ab69700bf384e4c7dfee2ce2fb5d1cb558428e23198083e1725d72de988 25dcf31485d24b07f4
SHA-384 : 3fa99ed4375ac6439b1433893ec250fbf6a4ee8678fedbeaab23a3a853c4a8f569512587fe962291ac3a5f3c48bb051c
Full Path : C:\Users\Electrike\Downloads\setup_deadlight_directors_cut_2.0.0.2.exe
Modified Time : 17/10/2017 1:11:38 AM
Created Time : 17/10/2017 1:11:01 AM
Entry Modified Time: 17/10/2017 1:11:38 AM
File Size : 34,037,288
File Version : 2.0.0.2
Product Version : 2.0.0.2
Identical :
Extension : exe
File Attributes : AI
==================================================

Same as everybody here... Waiting for an update from GOG or from Kaspersky.

:D 2019 and gues what ?

(◠‿◠✿)(◠‿◠✿)(◠‿◠✿)(◠‿◠✿)

check: 31032019.png (latest KAV , updates everything, still detects a TH so nothing is fixed at KAV :D

(◠‿◠✿)(◠‿◠✿)(◠‿◠✿)(◠‿◠✿)

still not fixed


DUKE NUKEM uninstaller also flagged .....
must restart ........... says kav , lets hope its a falsepositive