Skip to main content
chuckw1960
Inspiring
May 4, 2017
Question

armsvc.exe detected as virus

  • May 4, 2017
  • 6 replies
  • 22012 views

As of today, many in my organization are getting a virus detection on armsvc.exe, we use Windows 7 and various versions of Acrobat. We use AVG Cloudcare.

6 replies

Adobe Employee
May 5, 2017

Hi All,

The issue is resolved now with the new Virus Database version: 4776/14432 (5/4/2017, 1:01 PM). Please reinstall AVG if you are still facing the issue.

Please let us know if you are still getting this binary treated as a threat.

Thanks,

Dhwaj

July 6, 2020

I am still having this issue with AVG Server ... haven't been able to run Adobe DC Reader for almost a month now

Adobe Employee
May 5, 2017

We need armsvc.exe binary from your machine which is being flagged as virus to investigate it at our end.

I have sent direct messages to all of you with the steps to send the file to me. Thanks.

chuckw1960
Inspiring
May 5, 2017

Mohd,

So with the latest post from Dhwaj, do you still need the file sent to you?

Adobe Employee
May 5, 2017

If the issue is resolved for you as per the steps suggested by Dhwaj then there is no need to send the file else if it is still not working for you please send us the file to investigate the issue at our end. Thanks.

Participant
May 4, 2017

How long does it take for someone from Adobe to reply to these threads? Would like to know something ASAP

Participating Frequently
May 4, 2017

If file version is 1.824.22.5037 and digital signature shows up as "OK", the file should be valid.

All files in C:\Program Files (x86)\Common Files\Adobe\ARM\1.0 should be the same version and have valid digital signatures.

Most likely false positive as mentioned on this thread.

Participating Frequently
May 4, 2017

That could explain why Adobe issued the update, the 2/3/17 version of the armsvc.exe on my PC has a certificate that expires on 5/7/17

Participant
May 4, 2017

We've had this come up on 2 systems so far. I reported it as a false positive to AVG/Avast. Not sure how long that takes to turn around though.

Participating Frequently
May 4, 2017

I have had this happen on 4 systems so far, windows 7 and 8.1. Is there a newer version of this file?

Participating Frequently
May 4, 2017

This might not be a false positive. I deleted the armsvc.exe from quarantine and rebooted. I then loaded reader dc and selected "repair installation" which replaced the file. Now checking armsvc.exe causes no reaction from avg. Still investigating...

Participant
May 4, 2017

Interesting.

I just did a repair installation and now getting this error. File modified date change from 2/7/2017 to 4/25/2017. New MSI in the cache folder.

Participant
May 4, 2017

Same here. Have had a couple users report this so far.