Skip to main content
July 31, 2013
Question

ColdFusion 10 Uninstaller.jar file

  • July 31, 2013
  • 4 replies
  • 1676 views

I performed a scan with an updated version of Malwarebytes Anti-Malware and it flagged the following file with a Backdoor.MSIL.P infection:

../ColdFusion10/uninstall/uninstaller.jar

Can someone confirm the same or is this a false positive detection?

    This topic has been closed for replies.

    4 replies

    Participant
    August 15, 2013

    I received the same alert, flagging two files, also using Malwarebytes:

    Backdoor.MSIL.P

    c:/coldfusion9/inbridge/uninstall/uninstaller.jar

    c:/coldfusion9/uninstall/uninstaller.jar

    Inspiring
    August 14, 2013

    I have that file as well and it is showing up as a trojan... any updates yet on this?

    Priyank Shrivastava.
    Inspiring
    August 14, 2013

    Hi Larry,

    Our security team verified it and found that this was a false positive detection however if you're concern feel free to send an email with this jar file and your scan report to psirt@adobe.com.

    Thanks,

    Priyank

    Thanks, Priyank Shrivastava
    Priyank Shrivastava.
    Inspiring
    August 6, 2013

    Hi All,

    We are looking into this and will update you as soon as possible. Also could you please share your scanned result with us at cf.install@adobe.com

    Thanks,

    Priyank

    Thanks, Priyank Shrivastava
    August 7, 2013

    Priyank - An email has been sent to you with the subject "Malware Scan Results."

    Priyank Shrivastava.
    Inspiring
    August 7, 2013

    Thanks, Let us check this and will let you know.

    Regards,

    Priyank

    Thanks, Priyank Shrivastava
    August 6, 2013

    I have the same problem. The only difference is the file path for mine was .../ColdFusion9/uninstall/uninstaller.jar.

    Any thoughts from the forum would be appreciated.  Is this a legitimate file?

    August 6, 2013

    The date on the uninstaller.jar file matches the date of most other originally installed files in the CF directory.  I think this is a false positive.