Malwarebytes flags PDF-Xchange viewer as a Trojan

The PDF-XChange Viewer for End Users
+++ FREE +++

Moderators: PDF-XChange Support, Daniel - PDF-XChange, Chris - PDF-XChange, Sean - PDF-XChange, Paul - PDF-XChange, Vasyl - PDF-XChange, Ivan - Tracker Software, Stefan - PDF-XChange

nvn
User
Posts: 1
Joined: Wed Jan 20, 2016 4:01 pm

Malwarebytes flags PDF-Xchange viewer as a Trojan

Post by nvn »

I have been using PDF-Xchange viewer for a long time now. I installed Malwarebytes Anti-Malware about three weeks ago. I put a fresh install of Windows 10 Pro on my laptop in November, and set BitDefender as my antivirus. Until today, I have not noticed any problems at all. No alerts about any viruses or malware. But this morning, I booted up my PC, and Malwarebytes suddenly says everything in the Tracker Software folder and a bunch of registry keys for PDF-Xchange viewer are now malware. It specifically flags everything as "Trojan.Vonteera". Everything was fine yesterday. I made no changes to any software, to my knowledge anyway.

Should I just uninstall PDF-Xchange viewer, download a fresh copy, and reinstall it? Any other suggestions?

----
Malware scan results.

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1/20/2016
Scan Time: 10:07 AM
Logfile:
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2016.01.20.04
Rootkit Database: v2016.01.09.01
License: Free
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 10
CPU: x64
File System: NTFS
User:

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 400140
Time Elapsed: 31 min, 45 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 145
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\TYPELIB\{9ED66FF9-6C60-4DCF-8D1C-289DF0530203}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{44742089-3EE5-49F2-A859-8BBCD85E6BE8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{44742089-3EE5-49F2-A859-8BBCD85E6BE8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{44742089-3EE5-49F2-A859-8BBCD85E6BE8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9ED66FF9-6C60-4DCF-8D1C-289DF0530203}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{9ED66FF9-6C60-4DCF-8D1C-289DF0530203}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\TYPELIB\{661EF0B7-6AD3-4988-BD89-F6C67DB04D78}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{63EB0EAA-EAC3-4CF2-A0AF-E5B445680CFC}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{EC66DDA5-1874-4C8C-89F7-AEE1DE0497DC}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{63EB0EAA-EAC3-4CF2-A0AF-E5B445680CFC}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EC66DDA5-1874-4C8C-89F7-AEE1DE0497DC}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{63EB0EAA-EAC3-4CF2-A0AF-E5B445680CFC}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EC66DDA5-1874-4C8C-89F7-AEE1DE0497DC}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{661EF0B7-6AD3-4988-BD89-F6C67DB04D78}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{661EF0B7-6AD3-4988-BD89-F6C67DB04D78}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{C7F70A09-F3F8-4344-A688-6BC747A694B6}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{C7F70A09-F3F8-4344-A688-6BC747A694B6}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C7F70A09-F3F8-4344-A688-6BC747A694B6}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C7F70A09-F3F8-4344-A688-6BC747A694B6}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7F70A09-F3F8-4344-A688-6BC747A694B6}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D584CD7A-B8AF-48f7-A543-45021D439A74}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\TYPELIB\{2E19D395-7974-480B-9E28-CF1D7536983F}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{256342AE-1477-4722-BA9D-4A2AE6984494}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{53D68C77-20E5-455B-AA8E-2F071530FE67}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{6BBDAD78-4AA9-40B1-977A-1D2A459B49C3}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{C5EA83BB-986F-4F32-AD38-E47C3970A357}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{C7BCFE0A-B521-4181-A722-904DBF9427D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{256342AE-1477-4722-BA9D-4A2AE6984494}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{53D68C77-20E5-455B-AA8E-2F071530FE67}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{6BBDAD78-4AA9-40B1-977A-1D2A459B49C3}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C5EA83BB-986F-4F32-AD38-E47C3970A357}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C7BCFE0A-B521-4181-A722-904DBF9427D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{256342AE-1477-4722-BA9D-4A2AE6984494}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{53D68C77-20E5-455B-AA8E-2F071530FE67}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{6BBDAD78-4AA9-40B1-977A-1D2A459B49C3}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C5EA83BB-986F-4F32-AD38-E47C3970A357}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C7BCFE0A-B521-4181-A722-904DBF9427D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{2E19D395-7974-480B-9E28-CF1D7536983F}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{2E19D395-7974-480B-9E28-CF1D7536983F}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\PDFXCviewAx.CoPDFXCargs.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\PDFXCviewAx.CoPDFXCargs, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PDFXCviewAx.CoPDFXCargs, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PDFXCviewAx.CoPDFXCargs, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PDFXCviewAx.CoPDFXCargs.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PDFXCviewAx.CoPDFXCargs.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{D584CD7A-B8AF-48F7-A543-45021D439A74}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D584CD7A-B8AF-48F7-A543-45021D439A74}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DFC89414-E8E7-49c0-B14E-EB61245D3A5D}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\PDFXCviewAx.CoPDFXCpreview.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\PDFXCviewAx.CoPDFXCpreview, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PDFXCviewAx.CoPDFXCpreview, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PDFXCviewAx.CoPDFXCpreview, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PDFXCviewAx.CoPDFXCpreview.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PDFXCviewAx.CoPDFXCpreview.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{DFC89414-E8E7-49C0-B14E-EB61245D3A5D}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{DFC89414-E8E7-49C0-B14E-EB61245D3A5D}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FE36F0F3-F082-41B7-9EED-772505A7C054}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\PDFXCviewAx.CoPDFXCview.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\PDFXCviewAx.CoPDFXCview, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PDFXCviewAx.CoPDFXCview, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PDFXCviewAx.CoPDFXCview, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PDFXCviewAx.CoPDFXCview.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PDFXCviewAx.CoPDFXCview.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{FE36F0F3-F082-41B7-9EED-772505A7C054}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{FE36F0F3-F082-41B7-9EED-772505A7C054}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C7F70A09-F3F8-4344-A688-6BC747A694B6}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{1C66A4DF-034A-4AAA-B33F-B38A5D6025D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{1C66A4DF-034A-4AAA-B33F-B38A5D6025D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1C66A4DF-034A-4AAA-B33F-B38A5D6025D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{1C66A4DF-034A-4AAA-B33F-B38A5D6025D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1C66A4DF-034A-4AAA-B33F-B38A5D6025D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C5D07EB6-BBCE-4DAE-ACBB-D13A8D28CB1F}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\TYPELIB\{C96810A1-B8B8-481D-B3B0-C23BF7BE635D}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C96810A1-B8B8-481D-B3B0-C23BF7BE635D}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{C96810A1-B8B8-481D-B3B0-C23BF7BE635D}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\PDFXCviewIEPlugin.CoPDFXCviewIEPlugin.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\PDFXCviewIEPlugin.CoPDFXCviewIEPlugin, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PDFXCviewIEPlugin.CoPDFXCviewIEPlugin, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PDFXCviewIEPlugin.CoPDFXCviewIEPlugin, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PDFXCviewIEPlugin.CoPDFXCviewIEPlugin.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PDFXCviewIEPlugin.CoPDFXCviewIEPlugin.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{C5D07EB6-BBCE-4DAE-ACBB-D13A8D28CB1F}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C5D07EB6-BBCE-4DAE-ACBB-D13A8D28CB1F}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1C66A4DF-034A-4AAA-B33F-B38A5D6025D8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{1AC7939A-F487-4C8D-97AA-062FCA5DFA3C}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1AC7939A-F487-4C8D-97AA-062FCA5DFA3C}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\TYPELIB\{248E855D-36B8-48B1-9501-1977C0BEAC34}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{58A133AA-B589-4532-8DC4-B954D9A8FB31}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{82B7CC77-0CD2-4F51-8109-6493D5FD484B}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{B3D738ED-CEEF-4572-9FF2-C2010B2D32A0}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\INTERFACE\{F1D18E8C-1428-4759-AB30-9696054AACA3}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{58A133AA-B589-4532-8DC4-B954D9A8FB31}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{82B7CC77-0CD2-4F51-8109-6493D5FD484B}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B3D738ED-CEEF-4572-9FF2-C2010B2D32A0}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F1D18E8C-1428-4759-AB30-9696054AACA3}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{58A133AA-B589-4532-8DC4-B954D9A8FB31}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{82B7CC77-0CD2-4F51-8109-6493D5FD484B}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B3D738ED-CEEF-4572-9FF2-C2010B2D32A0}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F1D18E8C-1428-4759-AB30-9696054AACA3}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{248E855D-36B8-48B1-9501-1977C0BEAC34}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{248E855D-36B8-48B1-9501-1977C0BEAC34}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.PXC_PDFFilter.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.PXC_PDFFilter, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.PXC_PDFFilter, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.PXC_PDFFilter, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.PXC_PDFFilter.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.PXC_PDFFilter.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1AC7939A-F487-4C8D-97AA-062FCA5DFA3C}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{67EB453C-1BE1-48EC-AAF3-23B10277FCC1}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.PXCPropertyHandler.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.PXCPropertyHandler, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.PXCPropertyHandler, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.PXCPropertyHandler, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.PXCPropertyHandler.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.PXCPropertyHandler.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{67EB453C-1BE1-48EC-AAF3-23B10277FCC1}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{67EB453C-1BE1-48EC-AAF3-23B10277FCC1}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B2F55D43-C7A4-4B7C-90D7-7A860DFA9F2A}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.PXCInfoShlExt.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.PXCInfoShlExt, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.PXCInfoShlExt, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.PXCInfoShlExt, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.PXCInfoShlExt.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.PXCInfoShlExt.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{B2F55D43-C7A4-4B7C-90D7-7A860DFA9F2A}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B2F55D43-C7A4-4B7C-90D7-7A860DFA9F2A}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CF822AB4-6DB5-4FDA-BC28-E61DF36D2583}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.CPXCPreviewHandler.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.CPXCPreviewHandler, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.CPXCPreviewHandler, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.CPXCPreviewHandler, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.CPXCPreviewHandler.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.CPXCPreviewHandler.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{CF822AB4-6DB5-4FDA-BC28-E61DF36D2583}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CF822AB4-6DB5-4FDA-BC28-E61DF36D2583}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EBD0B8F4-A9A0-41B7-9695-030CD264D9C8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.PXCThumbProvider, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.PXCThumbProvider, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.PXCThumbProvider, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\XCShInfo.PXCThumbProvider.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\CLASSES\XCShInfo.PXCThumbProvider.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\XCShInfo.PXCThumbProvider.1, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\CLSID\{EBD0B8F4-A9A0-41B7-9695-030CD264D9C8}, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EBD0B8F4-A9A0-41B7-9695-030CD264D9C8}, , [c222e2592a6fe056bf4b0f29c1435da3],

Registry Values: 6
Trojan.Vonteera, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED|{67EB453C-1BE1-48EC-AAF3-23B10277FCC1}, PDF-XChange PDF Property Handler, , [c222e2592a6fe056bf4b0f29c1435da3]
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED|{67EB453C-1BE1-48EC-AAF3-23B10277FCC1}, PDF-XChange PDF Property Handler, , [c222e2592a6fe056bf4b0f29c1435da3]
Trojan.Vonteera, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED|{CF822AB4-6DB5-4FDA-BC28-E61DF36D2583}, PDF-XChange PDF Preview Provider, , [c222e2592a6fe056bf4b0f29c1435da3]
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED|{CF822AB4-6DB5-4FDA-BC28-E61DF36D2583}, PDF-XChange PDF Preview Provider, , [c222e2592a6fe056bf4b0f29c1435da3]
Trojan.Vonteera, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED|{EBD0B8F4-A9A0-41B7-9695-030CD264D9C8}, PDF-XChange PDF Thumbnail Provider, , [c222e2592a6fe056bf4b0f29c1435da3]
Trojan.Vonteera, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED|{EBD0B8F4-A9A0-41B7-9695-030CD264D9C8}, PDF-XChange PDF Thumbnail Provider, , [c222e2592a6fe056bf4b0f29c1435da3]

Registry Data: 0
(No malicious items detected)

Folders: 9
Trojan.Vonteera, C:\Program Files\Tracker Software\Update, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\ocrdats, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\Win32, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\Shell Extensions, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\Shell Extensions\Win32, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\Vault, , [c222e2592a6fe056bf4b0f29c1435da3],

Files: 36
Trojan.Vonteera, C:\Program Files\Tracker Software\Update\TrackerUpdate.exe, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\ISTask.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.tlb, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\PDFXCviewAx.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\Win32\PDFXCviewAx.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\PDFXCviewIEPlugin.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\Win32\PDFXCviewIEPlugin.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\resource.dat, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\unins000.dat, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\unins000.exe, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\unins000.msg, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\ocrdats\eng.lng, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\ocrdats\eng_pxvocr.dat, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\Ask.png, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\Ask.xml, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\bing.png, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\bing.xml, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\google.png, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\google.xml, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\Seznam.png, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\Seznam.xml, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\UAmeta.png, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\UAmeta.xml, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\wikipedia.png, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\wikipedia.xml, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\yahoo.png, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\yahoo.xml, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\yandex.png, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\SearchProviders\yandex.xml, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\Shell Extensions\PDFProperties.propdesc, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\Shell Extensions\XCShInfo.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\Shell Extensions\Win32\XCShInfo.dll, , [c222e2592a6fe056bf4b0f29c1435da3],
Trojan.Vonteera, C:\Program Files\Tracker Software\Vault\XCVault.exe, , [c222e2592a6fe056bf4b0f29c1435da3],

Physical Sectors: 0
(No malicious items detected)


(end)
User avatar
Stefan - PDF-XChange
Site Admin
Posts: 19930
Joined: Mon Jan 12, 2009 8:07 am

Re: Malwarebytes flags PDF-Xchange viewer as a Trojan

Post by Stefan - PDF-XChange »

Hello nvn,

Welcome to our forums.
You might have caught the virus from elsewhere, or this could be a false positive. We do check each of our builds with multiple (up to a hundred) antivirus engines to make sure that they are free of any unwanted things in them before uploading them to the download server, and then run the same checks on the uploaded files, so it's unlikely that this came from our product.

I would indeed recommend you to try a clean reinstall and see if that will help.

Regards,
Stefan
dkm heating and air
User
Posts: 8
Joined: Mon Feb 24, 2014 10:35 pm

Re: Malwarebytes flags PDF-Xchange viewer as a Trojan

Post by dkm heating and air »

I have this exact same issue as well. The Trojan Vonteera is somehow tied to my tracker update utility...
User avatar
Stefan - PDF-XChange
Site Admin
Posts: 19930
Joined: Mon Jan 12, 2009 8:07 am

Re: Malwarebytes flags PDF-Xchange viewer as a Trojan

Post by Stefan - PDF-XChange »

Hello dkm heating and air,

Thanks - we are investigating now (I am running virus checks on all our installers as we speak), but this seems to only happen with MalwareBytes users so far - so it's probably a false positive at their end.

Here is a sample of the scan result of the TrackerUpdate.exe that gets installed with build 316.1, the current latest (showing as 0/54 - clean):
https://www.virustotal.com/en/file/cb9d ... /analysis/

Can you try to run a scan of the files at your end using the above website and see what is reported for them?

Regards,
Stefan
User avatar
Will - Tracker Supp
Site Admin
Posts: 6815
Joined: Mon Oct 15, 2012 9:21 pm

Re: Malwarebytes flags PDF-Xchange viewer as a Trojan

Post by Will - Tracker Supp »

Hi guys,

I've just contacted Malwarebytes and am waiting to hear back from them.

Thanks,
If posting files to this forum, you must archive the files to a ZIP, RAR or 7z file or they will not be uploaded.
Thank you.

Best regards

Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com
User avatar
Will - Tracker Supp
Site Admin
Posts: 6815
Joined: Mon Oct 15, 2012 9:21 pm

Re: Malwarebytes flags PDF-Xchange viewer as a Trojan

Post by Will - Tracker Supp »

Hi guys,

As per the news item on our website, Malwarebytes have responded and confirmed that this was a false detection. They've said that they will update their libraries today and the update should be available within an hour or two:
https://forums.malwarebytes.org/index.p ... ge-editor/

Thanks,
If posting files to this forum, you must archive the files to a ZIP, RAR or 7z file or they will not be uploaded.
Thank you.

Best regards

Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com
dkm heating and air
User
Posts: 8
Joined: Mon Feb 24, 2014 10:35 pm

Re: Malwarebytes flags PDF-Xchange viewer as a Trojan

Post by dkm heating and air »

Good deal, thanks.
User avatar
Will - Tracker Supp
Site Admin
Posts: 6815
Joined: Mon Oct 15, 2012 9:21 pm

Re: Malwarebytes flags PDF-Xchange viewer as a Trojan

Post by Will - Tracker Supp »

:D
If posting files to this forum, you must archive the files to a ZIP, RAR or 7z file or they will not be uploaded.
Thank you.

Best regards

Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com