i have the package installed ( with the real time scanning OFF)
only the install package is infected