Skip to main content
A
Anonymous
March 4, 2020
Question

Antivirus behavior monitoring alerts generated by Acrobat Reader

  • March 4, 2020
  • 1 reply
  • 814 views

Hi, I'm handling AV at my employer, and I've been continually receiving alerts regarding behavior monitoring and Adobe Acrobat Reader.

 

Namely, AcroRd32.exe tries to create a new cmd.exe process on it's own (basically Acrobat Reader trying to open a command prompt). AV successfully blocks this, but I'm getting multiple alerts from this and we haven't identified any malicious PDF files that might cause this. Sometimes this happens when a PDF is not opened. I suspect this is part of the Adobe Acrobate Reader update process, but I would need some confirmation regarding this.

 

Thanks

This topic has been closed for replies.

1 reply

Amal.
Amal.
Legend
March 5, 2020

Hi Datnm,

 

We are sorry for the trouble. As described AcroRd32.exe tries to create a new cmd.exe process on its own. 

 

Acrobat and Adobe Reader continually check the web browser for open PDF documents. In certain circumstances, Acrobat and Adobe Reader detect that an open document condition exists in the browser when in fact there are no PDF files open. The browser plug-in stores files in the browser cache, which may cause the browser to report an incorrect condition until the browser is closed. In addition, applications with hooks into Internet Explorer may causeAcrobat and Adobe Reader to detect an open browser even when the browser appears to be closed.

 

For more information please refer to the steps provided in the help article (https://helpx.adobe.com/acrobat/kb/acrobat-exe-acrord32-exe-doesnt.html)

 

Regards

Amal

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices