Hi,
Detected and quarantined by Microsoft Defender. Detection for this is added Aug 8.
Apparently the usual false-positive is uninst000.exe per http://www.pdfforge.org/content/my-anti-virus-program-says-pdfcreator-contains-virus-dont-you-check-your-files.
This one however is called PDFCreator_Stub_5874[1].exe.
What is this module and what does it do? It is in IE5 temporary files. Is this a legitimate
PDF Creator module, or something else pretending to be?
MS Defender detail:
Category: Software Bundler
Description: This program may install other potentially unwanted software.
Recommended action: Permit this detected item only if you trust the program or the software publisher.
Items:
file:C:\\Users\\\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\27UMA7UW\\PDFCreator_Stub_5874[1].exe
Virus Total Report:
https://www.virustotal.com/en/file/fb1d6323df9ef71c84884db0b09e787e3b750d4fab31d7c9f7da578c558ca6ec/analysis/