Jump to content

ClosePDFSAVER.exe (Trojan.Agent)

Recommended Posts


I believe ClosePDFSAVER.exe is a false positive. I ran it on http://online.us.drweb.com/ and it came up clean.

This is part of ZipFormsOnline used for Real Estate agents to write contracts.




Malwarebytes' Anti-Malware 1.44

Database version: 3558

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

1/14/2010 6:01:19 AM

mbam-log-2010-01-14 (06-01-10).txt

Scan type: Full Scan (C:\|)

Objects scanned: 365505

Time elapsed: 3 hour(s), 15 minute(s), 46 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 3

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\REFN\PDF-X\ClosePDFSAVER.exe (Trojan.Agent) -> No action taken.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Program Files\REFN\PDF-X\ClosePDFSAVER.exe (Trojan.Agent) -> No action taken.

C:\System Volume Information\_restore{16CBA567-31C9-4A5E-90EB-460A7078F05D}\RP21\A0002449.sys (Malware.Trace) -> No action taken.

C:\System Volume Information\_restore{16CBA567-31C9-4A5E-90EB-460A7078F05D}\RP21\A0002614.sys (Malware.Trace) -> No action taken.

Share this post

Link to post
Share on other sites
This topic is now closed to further replies.