[solved] Possible False Positive 2010

In the most recent scans on two different PCs, I've had reports of occurrences of Exploit.PDF-JS.Gen found in at least three different Adobe .PDF files. These files were located in the program data folders of either Photoshop Elements V5 or V7.


All of the .PDF files have been on the computers for one or more years and have not been previously detected. They are all template files which I have never opened.


So my question would be, are these detections simply some sort of false positive or not?


I have not had any of the problems reported as associated with Exploit.PDF-JS.Gen. All of the files were quarantined and then deleted manually by me.


Any thoughts would be appreciated.

Comments

  • I had the same problem 2 days ago, suddenly reporting that trojan in a Photoshop library pdf file that had not changed and which had not previously been trapped. I assumed it was a false +ve but i deleted it in case. I've been running BD2010 as a trial for 2 weeks, but I've just removed it as it had begin to hog my cpu as reported by others, and I could not work with that level of disruption.

  • Hello georged,


    Please put the suspected files in an archive protected with the password infected (details in my signature), upload the archive on a file sharing server of your choice (like www.sendspace.com) and send me the download link by PM. Temporarily disable BitDefender realtime protection if the files are blocked.


    Cris.

  • Hello georged,


    Please put the suspected files in an archive protected with the password infected (details in my signature), upload the archive on a file sharing server of your choice (like www.sendspace.com) and send me the download link by PM. Temporarily disable BitDefender realtime protection if the files are blocked.


    Cris.


    Sorry Chris, the files have already been deleted.

  • Since the files in question have been deleted and nobody else reported problems on this topic, I'll consider this problem solved. Therefore, this topic will be closed. If you need it reopened, use the Report button to let us know.


    Cris.


    == CLOSED ==


    == Issue solved ==

This discussion has been closed.