PDM.Worm detected in Calibre?

[Nyx1961]

I started opening some books in Calibre after having updated to version 0.9.27 and suddenly my Kaspersky Pure AV advised me that it detected a worm called PDM.Worm.P2P.generic. I've been using Calibre since last summer and truly appreciate the work that goes into it but this has me a little concerned.

[DoctorOhh]

Calibre's official response from the FAQ.

[Nyx1961]

Thank you for your quick response. I did download Calibre from the official source and did try to find information before posting here but as I said, I've been using Calibre without issue since last August so I became concerned by the Kaspersky especially when the following came up when I installed the latest version:


(Click to enlarge.)

[theducks]

You may have other malware infecting downloads. Did you notice those other entries with the same worm ?

[Nyx1961]

Originally Posted by theducks

You may have other malware infecting downloads. Did you notice those other entries with the same worm ?

No, this is the only one. The only other issue I've ever had is a known Kaspersky glitch with an unknown PDM.keylogger being detected due to, if I remember correctly, Adobe Reader. I'm just going to roll back to the last version of Calibre as it worked fine for me and Kaspersky didn't view it as a threat.

[DoctorOhh]

Originally Posted by Nyx1961

No, this is the only one. The only other issue I've ever had is a known Kaspersky glitch with an unknown PDM.keylogger being detected due to, if I remember correctly, Adobe Reader. I'm just going to roll back to the last version of Calibre as it worked fine for me and Kaspersky didn't view it as a threat.

The point of the FAQ is that as long as you are downloading calibre from the proper source then Kaspersky is reporting a false positive.

Posted from the FAQ for others to view.

Originally Posted by calibre FAQ

If you have the official download and your antivirus program is still claiming calibre is a virus, then, your antivirus program is wrong. Antivirus programs use heuristics, patterns of code that “look suspicious” to detect viruses. It’s rather like racial profiling. calibre is a completely open source product. You can actually browse the source code yourself (or hire someone to do it for you) to verify that it is not a virus. Please report the false identification to whatever company you buy your antivirus software from. If the antivirus program is preventing you from downloading/installing calibre, disable it temporarily, install calibre and then re-enable it.

You can over come this false positive by following the directions on Kaspersky's site.

Even if you just roll back to the previous version you should still follow these directions and report the false positive to Kaspersky.

[EowynCarter]

Unless as theducks said, a virus messed with the calibre executable.