(apengine.dll,AcroRdIF.dll,PDFPrevHndlrShim.exe,ci res.dll) [SOLVED by db 1503]

[yjsk2100]

I run scans on my computer periodically and the only one that says I have trojans is IOBit 360. It found these. I used VirusTotal Uploader 2.0 but the numbers are not listed. (1082.1087. 1086 and 1066)

 

 

IObit Security 360

 

OS:Windows XP

Version:1.4.1.11

Define Version:1502

Time Elapsed:00:19:38

Objects Scanned:53044

Threats Found:7

 

|Name|Type|Description|ID|

Trojan.Backdoor, File, C:\Program Files\McAfee\SiteAdvisor\apengine.dll, 12-1082

Trojan.Dropper, File, C:\Program Files\Adobe\Reader 9.0\Reader\AcroRdIF.dll, 12-1087

Trojan.Backdoor, File, C:\Program Files\Adobe\Reader 9.0\Reader\PDFPrevHndlrShim.exe, 12-1082

Trojan.Agent, File, C:\Program Files\Google\Google Updater\2.4.1601.7122\cires.dll, 12-1066

Trojan.Spyware, File, C:\Program Files\HP\Digital Imaging\Smart Web Printing\UtilityLib.dll, 12-1086

Trojan.Dropper, File, C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRdIF.dll, 12-1087

Trojan.Backdoor, File, C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\PDFPrevHndlrShim.exe, 12-1082

 

 

Not sure if this will work or not but here is the upload for the first one listed apengine.dll

 

apengine.dll

[snoopy2010]

ok

 

first dont post what might have been an infected file...... as u could infect users on this form

 

second it is most likely a false positive as VirusTotal says its clean...

 

third read this

 

Guidelines and Requirements for Reporting a False Positive

[hxin]

I run scans on my computer periodically and the only one that says I have trojans is IOBit 360. It found these. I used VirusTotal Uploader 2.0 but the numbers are not listed. (1082.1087. 1086 and 1066)

 

 

IObit Security 360

 

OS:Windows XP

Version:1.4.1.11

Define Version:1502

Time Elapsed:00:19:38

Objects Scanned:53044

Threats Found:7

 

|Name|Type|Description|ID|

Trojan.Backdoor, File, C:\Program Files\McAfee\SiteAdvisor\apengine.dll, 12-1082

Trojan.Dropper, File, C:\Program Files\Adobe\Reader 9.0\Reader\AcroRdIF.dll, 12-1087

Trojan.Backdoor, File, C:\Program Files\Adobe\Reader 9.0\Reader\PDFPrevHndlrShim.exe, 12-1082

Trojan.Agent, File, C:\Program Files\Google\Google Updater\2.4.1601.7122\cires.dll, 12-1066

Trojan.Spyware, File, C:\Program Files\HP\Digital Imaging\Smart Web Printing\UtilityLib.dll, 12-1086

Trojan.Dropper, File, C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRdIF.dll, 12-1087

Trojan.Backdoor, File, C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\PDFPrevHndlrShim.exe, 12-1082

 

 

Not sure if this will work or not but here is the upload for the first one listed apengine.dll

 

apengine.dll

Hi yjsk2100

 

Thanks for your feedback.

PLS upload the files (AcroRdIF.dll , cires.dll , UtilityLib.dll) to http://www.wikisend.com for our Examination.

 

We are looking forward to your reply.

[hxin]

first dont post what might have been an infected file...... as u could infect users on this form

 

second it is most likely a false positive as VirusTotal says its clean...

 

third read this

 

Guidelines and Requirements for Reporting a False Positive

 

Hi snoopy

 

We need the file (maybe that have been an infected so dont download) for our Examination then we can confirm that he is a false positive or not.

 

Thank you.

[snoopy2010]

ok

 

cool hxin lol

[enoskype]

Hi hxin,

 

For :

apengine.dll

AcroRdIF.dll

PDFPrevHndlrShim.exe

files in same folders as above, it is the same here shown as a thread.

For:

cires.dll

file, mine is version:2.4.1536.6592

and IS360 does not find it as a thread.

 

All 4 of them are attached to FP_Files.zip file with password infected

FP_Files.zip

[hxin]

Hi enos

 

Thank you very much.

This question have solved in 1503. PLS update.

 

 

cheers