Hello,

when i was updating the acrobat reader to 7.07 the following happened
view the phrases of my system log

Windows Defender Real-Time Protection agent has detected potential malware.
For more information please see the following:
http://www.microsoft.com
Scan ID: {927B702B-EFE1-46F8-8561-079A021A7D4B}
User: i removed this for security reasons
Threat Name: Unknown
Threat Id:
Threat Severity:
Threat Category:
Path Found: file:C:\Documents and Settings\All Users\Menu
Start\Programma's\Opstarten\Adobe Acrobat Snelle
start.lnk;startup:C:\Documents and Settings\All Users\Menu
Start\Programma's\Opstarten\Adobe Acrobat Snelle start.lnk
Threat Classification: Unknown
Detection Type:


the following i have translated from dutch to english

the Planner for Automated LiveUpdate-service could not start due to
folllowing error:
the system could not find the file.

Foutcode; 1000008e, parameter1: c0000005, parameter2: 887299a0, parameter3:
8891873c, parameter4: 00000000.

Within the updating phase my system rebooted completely

I'am running both the malious malware scanner and the latest windows defender
beta2 of microsoft

Did anybody see this before

I'm running Windows Defender on a number of machines which either have 7.07
in place, or have been upgraded to 7.07 while Windows Defender is in place
and active, and I haven't seen this. All of my machines are English
versions of both Windows and Adobe Reader, fwiw--not sure whether Reader is
available in other languages, and whether you are using those versions.

So--just to say that I haven't seen this issue, myself.

--

"Jan the dutchman" <Jan the (E-Mail Removed)> wrote in
message news:057D4A13-20C2-4BE4-ABE6-(E-Mail Removed)...
> Hello,
>
> when i was updating the acrobat reader to 7.07 the following happened
> view the phrases of my system log
>
> Windows Defender Real-Time Protection agent has detected potential
> malware.
> For more information please see the following:
> http://www.microsoft.com
> Scan ID: {927B702B-EFE1-46F8-8561-079A021A7D4B}
> User: i removed this for security reasons
> Threat Name: Unknown
> Threat Id:
> Threat Severity:
> Threat Category:
> Path Found: file:C:\Documents and Settings\All Users\Menu
> Start\Programma's\Opstarten\Adobe Acrobat Snelle
> start.lnk;startup:C:\Documents and Settings\All Users\Menu
> Start\Programma's\Opstarten\Adobe Acrobat Snelle start.lnk
> Threat Classification: Unknown
> Detection Type:
>
>
> the following i have translated from dutch to english
>
> the Planner for Automated LiveUpdate-service could not start due to
> folllowing error:
> the system could not find the file.
>
> Foutcode; 1000008e, parameter1: c0000005, parameter2: 887299a0,
> parameter3:
> 8891873c, parameter4: 00000000.
>
> Within the updating phase my system rebooted completely
>
> I'am running both the malious malware scanner and the latest windows
> defender
> beta2 of microsoft
>
> Did anybody see this before

Hello Bill,

I use XP Home SP2 Dutch with all latest patches, fixes and updates
I also use the latest acrobat reader 7.07 in the Dutch language.
After the crash XP noticed that it had to recover from that crash.
I find it strange that the defender marks adobe software as malicious
I think it is a bug in the detection rules.


"Bill Sanderson" wrote:

> I'm running Windows Defender on a number of machines which either have 7.07
> in place, or have been upgraded to 7.07 while Windows Defender is in place
> and active, and I haven't seen this. All of my machines are English
> versions of both Windows and Adobe Reader, fwiw--not sure whether Reader is
> available in other languages, and whether you are using those versions.
>
> So--just to say that I haven't seen this issue, myself.
>
> --
>
> "Jan the dutchman" <Jan the (E-Mail Removed)> wrote in
> message news:057D4A13-20C2-4BE4-ABE6-(E-Mail Removed)...
> > Hello,
> >
> > when i was updating the acrobat reader to 7.07 the following happened
> > view the phrases of my system log
> >
> > Windows Defender Real-Time Protection agent has detected potential
> > malware.
> > For more information please see the following:
> > http://www.microsoft.com
> > Scan ID: {927B702B-EFE1-46F8-8561-079A021A7D4B}
> > User: i removed this for security reasons
> > Threat Name: Unknown
> > Threat Id:
> > Threat Severity:
> > Threat Category:
> > Path Found: file:C:\Documents and Settings\All Users\Menu
> > Start\Programma's\Opstarten\Adobe Acrobat Snelle
> > start.lnk;startup:C:\Documents and Settings\All Users\Menu
> > Start\Programma's\Opstarten\Adobe Acrobat Snelle start.lnk
> > Threat Classification: Unknown
> > Detection Type:
> >
> >
> > the following i have translated from dutch to english
> >
> > the Planner for Automated LiveUpdate-service could not start due to
> > folllowing error:
> > the system could not find the file.
> >
> > Foutcode; 1000008e, parameter1: c0000005, parameter2: 887299a0,
> > parameter3:
> > 8891873c, parameter4: 00000000.
> >
> > Within the updating phase my system rebooted completely
> >
> > I'am running both the malious malware scanner and the latest windows
> > defender
> > beta2 of microsoft
> >
> > Did anybody see this before
>
>
>

I suspect that it is simply describing it as "unknown"--the surrounding
language, unfortunately, is the same for all detections, and describes stuff
as malicious when, in fact, it is not known.

--

"Jan the dutchman" <(E-Mail Removed)> wrote in
message news:F96F242C-4DDE-412A-9DD3-(E-Mail Removed)...
> Hello Bill,
>
> I use XP Home SP2 Dutch with all latest patches, fixes and updates
> I also use the latest acrobat reader 7.07 in the Dutch language.
> After the crash XP noticed that it had to recover from that crash.
> I find it strange that the defender marks adobe software as malicious
> I think it is a bug in the detection rules.
>
>
> "Bill Sanderson" wrote:
>
>> I'm running Windows Defender on a number of machines which either have
>> 7.07
>> in place, or have been upgraded to 7.07 while Windows Defender is in
>> place
>> and active, and I haven't seen this. All of my machines are English
>> versions of both Windows and Adobe Reader, fwiw--not sure whether Reader
>> is
>> available in other languages, and whether you are using those versions.
>>
>> So--just to say that I haven't seen this issue, myself.
>>
>> --
>>
>> "Jan the dutchman" <Jan the (E-Mail Removed)> wrote in
>> message news:057D4A13-20C2-4BE4-ABE6-(E-Mail Removed)...
>> > Hello,
>> >
>> > when i was updating the acrobat reader to 7.07 the following happened
>> > view the phrases of my system log
>> >
>> > Windows Defender Real-Time Protection agent has detected potential
>> > malware.
>> > For more information please see the following:
>> > http://www.microsoft.com
>> > Scan ID: {927B702B-EFE1-46F8-8561-079A021A7D4B}
>> > User: i removed this for security reasons
>> > Threat Name: Unknown
>> > Threat Id:
>> > Threat Severity:
>> > Threat Category:
>> > Path Found: file:C:\Documents and Settings\All Users\Menu
>> > Start\Programma's\Opstarten\Adobe Acrobat Snelle
>> > start.lnk;startup:C:\Documents and Settings\All Users\Menu
>> > Start\Programma's\Opstarten\Adobe Acrobat Snelle start.lnk
>> > Threat Classification: Unknown
>> > Detection Type:
>> >
>> >
>> > the following i have translated from dutch to english
>> >
>> > the Planner for Automated LiveUpdate-service could not start due to
>> > folllowing error:
>> > the system could not find the file.
>> >
>> > Foutcode; 1000008e, parameter1: c0000005, parameter2: 887299a0,
>> > parameter3:
>> > 8891873c, parameter4: 00000000.
>> >
>> > Within the updating phase my system rebooted completely
>> >
>> > I'am running both the malious malware scanner and the latest windows
>> > defender
>> > beta2 of microsoft
>> >
>> > Did anybody see this before
>>
>>
>>

One of the things I like about Defender is that I can disable these dumb
faststart programs. As far as I am concerned, they are malicious. Most
install programs don't ask you if you want them. And everyone of them wants
to access the Internet separately to look for updates. They slow down the
start-up of Windows and some remain in memory. I get rid of them all. I
like that I can easily disable or remove them with Defender.
"Jan the dutchman" <(E-Mail Removed)> wrote in
message news:F96F242C-4DDE-412A-9DD3-(E-Mail Removed)...
> Hello Bill,
>
> I use XP Home SP2 Dutch with all latest patches, fixes and updates
> I also use the latest acrobat reader 7.07 in the Dutch language.
> After the crash XP noticed that it had to recover from that crash.
> I find it strange that the defender marks adobe software as malicious
> I think it is a bug in the detection rules.
>
>
> "Bill Sanderson" wrote:
>
>> I'm running Windows Defender on a number of machines which either have
>> 7.07
>> in place, or have been upgraded to 7.07 while Windows Defender is in
>> place
>> and active, and I haven't seen this. All of my machines are English
>> versions of both Windows and Adobe Reader, fwiw--not sure whether Reader
>> is
>> available in other languages, and whether you are using those versions.
>>
>> So--just to say that I haven't seen this issue, myself.
>>
>> --
>>
>> "Jan the dutchman" <Jan the (E-Mail Removed)> wrote in
>> message news:057D4A13-20C2-4BE4-ABE6-(E-Mail Removed)...
>> > Hello,
>> >
>> > when i was updating the acrobat reader to 7.07 the following happened
>> > view the phrases of my system log
>> >
>> > Windows Defender Real-Time Protection agent has detected potential
>> > malware.
>> > For more information please see the following:
>> > http://www.microsoft.com
>> > Scan ID: {927B702B-EFE1-46F8-8561-079A021A7D4B}
>> > User: i removed this for security reasons
>> > Threat Name: Unknown
>> > Threat Id:
>> > Threat Severity:
>> > Threat Category:
>> > Path Found: file:C:\Documents and Settings\All Users\Menu
>> > Start\Programma's\Opstarten\Adobe Acrobat Snelle
>> > start.lnk;startup:C:\Documents and Settings\All Users\Menu
>> > Start\Programma's\Opstarten\Adobe Acrobat Snelle start.lnk
>> > Threat Classification: Unknown
>> > Detection Type:
>> >
>> >
>> > the following i have translated from dutch to english
>> >
>> > the Planner for Automated LiveUpdate-service could not start due to
>> > folllowing error:
>> > the system could not find the file.
>> >
>> > Foutcode; 1000008e, parameter1: c0000005, parameter2: 887299a0,
>> > parameter3:
>> > 8891873c, parameter4: 00000000.
>> >
>> > Within the updating phase my system rebooted completely
>> >
>> > I'am running both the malious malware scanner and the latest windows
>> > defender
>> > beta2 of microsoft
>> >
>> > Did anybody see this before
>>
>>
>>