Line40: I really dont know what the point in all this discussion about the adware state of GOG Galaxy or usefulness of this or that antivirus is.
I think GOG should resolve this issue with Kaspersky, like any other professional software company that tries to sell things to people. That's why I reported it.
If all of you security and software experts are as good as you say; Maybe you heard of compromised websites that spread malicious auto updates of otherwise perfectly harmless programs?
So the first thing that should come to mind if your antivirus reports such a find AFTER an update of the software is to suspect the update was maybe compromised, and not just blindly adding the new update to an exclusion list.
As I said, I didn't post this to get advice as to how to resolve the issue, but to bring it to the attention of GOG.
Cheers
Line40
If all you wanted to do was notify GOG (actually Kapersky needs to fix this, not GOG), then you should have e-mailed them or sent in a support ticket. Posting this in the discussion forums is inevitably going to lead to, well, discussion.
As for your thoughts on security, while what you describe has been known to happen, what happens far, FAR more often is antivirus products get it wrong. The most likely and first thing that should come to mind is "false positive", especially when the software in question is from an otherwise trusted source. However, we "security and software experts" don't just automatically believe one way or the other, we verify. On-demand malware scanners, VirusTotal, simple research, etc. can easily sort the false threats from the real ones. With Galaxy, basic logic will do: if Galaxy really were malware, the forums would be flooded with reports from multiple users and multiple antivirus products. That has not happened, therefore, false positive, add an exception to your antivirus.