PDF creator contain viruses

when I tried to install latest version of this application I found that installation file contain viruses!
virustotal scan results:

Bkav W32.HfsAdware.290A

CAT-QuickHeal Trojan.IGENERIC

ESET-NOD32 a variant of Win32/LuluSoftware.A potentially unwanted

GData Win32.Application.LuluSoftware.A

Rising PUA.LuluSoftware!8.F95B (CLOUD)



TrendMicro answer:
From: Trend Micro Technical Support
Subject: Trend Micro Support Request 01114994 has been updated

This is a system-generated email to notify you that your Threat Concern case with ID: 01114994 - pdf creator instalation has been updated with the information stated below.

Total Number of File Submitted:1

Number of file under analyzing: 0

Number of malicious file: 1

Number of normal file: 0

Number of incomplete file: 0

These are some files been identified as malicious.

File Name SmartScan detection/version Conventional detection/version JapanLegacy detection/version SHA1

PDFCreator-3_2_2-Setup.exe **PUA_WEBCOMPANION/**14.443.00 Migrating Migrating c40e31211dc60c37936a0986e86cfe3c1217b4c7

We have finished processing your submitted sample.

If you disagree with any of the result(s) above, please do not hesitate to respond to this case via our customer service portal.

If we do not hear from you, we assume that you are happy with the above analysis results and that this Service Request can be closed.

If you need further assistance, please respond within the Trend Micro MySupport website or reply with the same email subject with Case ID.

Thank You,

Trend Micro Technical Support

Could you make installation file safety?


the install file is totally safe, pua = potentially unwanted application.
Why they are flagging a single offer screen for WebCompanion during the setup as pua is hard to say, most likely they want to display more "finds" than their competitors. We are already in contact with most of the companies listed above and asking them to remove their false detections. The offer is 100% optional and nothing will get installed without your permission. The WebCompanion setup won't even get downloaded if you deny the offer screen (and it is a very clear offer screen with no misleading information). You can partially see how random these results are; some of them complain about LuLuSoftware while others complain about WebCompanion, but none actually complain about both. Not to mention all other products used on VirusTotal correctly identify the setup as safe.