When the installation package, PDFCreator-2_0_1.exe (MD5:1464dab853dfac75097e6f81fa060c9a), is invoked, the first thing it does is to spawn a process called DownloadUpdateInfo.exe and this runs its twin DownloadUpdateInfo.tmp for a brief moment and then closed down.Īfter soliciting inputs from the user, it then invokes CBStub.exe which controls the invocation of the process InstallManager.exe. My experiments with installing PDFCreator do not install Image2PDF and PDFArchitect.

I use two installation scenarios - with network access and without network access and they have different behavior causing AVG to report different alerts. My investigation used 2.0.1, the latest release to determine what's going on. First of all, I went to PDF Forge site to obtain the MD5 of the installation package to make sure I was not using a tainted package. Since PDFCreator's installation script trips my AVG, I have decided to investigate this further in a controlled environment. It is nice to see the installation script offering a feature to skip all the PUP. The installation of CutePDF Writer 3.0 went without tripping my AVG but one has to be on the wit about its attempt to slip in some PUP and toolbars. I will come back to this.Īs a result of this alarm, I revisited my trust old friend CutePDF Writer, which has fewer feature than PDFCreator. The installation experience left me with a sense of unease as it triggers the resident shield of my AVG 2015 flagging some files as being a Malware/Trojan/Adware.

I have been a long term, though slow to update, user of PDFCreator and recently I have decided to upgrade it to 2.0.0 from 1.7.3.

Is pdfcreator malware