Jump to content


  • Content Count

  • Joined

  • Last visited

About Audie

  • Rank
  1. Hi, I believe ClosePDFSAVER.exe is a false positive. I ran it on http://online.us.drweb.com/ and it came up clean. This is part of ZipFormsOnline used for Real Estate agents to write contracts. http://www.zipform.com/ Regards, Audie Malwarebytes' Anti-Malware 1.44 Database version: 3558 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 1/14/2010 6:01:19 AM mbam-log-2010-01-14 (06-01-10).txt Scan type: Full Scan (C:\|) Objects scanned: 365505 Time elapsed: 3 hour(s), 15 minute(s), 46 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 3 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\REFN\PDF-X\ClosePDFSAVER.exe (Trojan.Agent) -> No action taken. Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Program Files\REFN\PDF-X\ClosePDFSAVER.exe (Trojan.Agent) -> No action taken. C:\System Volume Information\_restore{16CBA567-31C9-4A5E-90EB-460A7078F05D}\RP21\A0002449.sys (Malware.Trace) -> No action taken. C:\System Volume Information\_restore{16CBA567-31C9-4A5E-90EB-460A7078F05D}\RP21\A0002614.sys (Malware.Trace) -> No action taken.
  • Create New...