I scanned both downloads (CNET's and the developer's) and encountered the same results, although I believe Kaspersky's alert is a false positive. One note is that CNET is offering version 1.0.7.1 SR1 while the developer is offering version 1.0.7.1 SR2, both of which have the same timestamp but different file sizes (and hashes). Given that, I would suggest contacting Kaspersky and including your log file so that they can update their virus signatures, preventing future false positives. In addition, I should note that it is up to the developer to keep the download on CNET up-to-date, so there is little CNET can do to rectify the issue. As an user, though, you can contact the developer to alert them that some virus scanners are flagging their product as malware and request that they ensure that the latest version is made available through CNET and other channels.

Regards,
John