Lightroom: I think I got a virus while downloading Lightroom today

  • 1
  • Problem
  • Updated 4 years ago
  • Not a Problem
  • (Edited)
MAY 8, 2014
GOT A VIRUS AT ADOBE WEBSITE PER DOWNLOAD FOR ADOBE PHOTOSHOP LIGHTROOM 5 TRIAL PROGRAM !!!

FILE LOCATION
C:/USERS/ADM/DESKTOP/ADMPROGRAMS/ADOBE/PHOTOSHOP LIGHTROOM 5.4/INSTALL LIGHTROOM 5.EXE

INFECTION
W32/Zbot.PM.gen!Eldorado

TYPE
Malicious Software

RESULT
Quarantined
Photo of Anna Mikiewicz

Anna Mikiewicz

  • 7 Posts
  • 0 Reply Likes
  • upset & do not appreciate all the extra work it created for me to get the virus cleaned off my laptop !!

Posted 4 years ago

  • 1
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
Which anti-virus program reported the virus?

What is the exact URL where you downloaded the file?

Have you confirmed with multiple anti-virus programs, and submitted file to your anti-virus software provider? Most files flagged as virus'd are false positives.

Don't get me wrong: it's worth taking this sort of thing seriously - just be aware: it's probably not a virus (since multiple persons are presumably downloading the very same file without such virus being detected).

Summary: step 1 - determine if real virus or false positive..

Note: if it *is* a real virus, then the question still remains: did it become infected after download, or was it already infected. If the former, then your system was already compromised, if the latter it may also be due to compromised system (depends on how you ended up with the download page / download link).

If the file really is (was) infected on Adobe site - I'm sure we'll all be hearing about it in short order.
Photo of Anna Mikiewicz

Anna Mikiewicz

  • 7 Posts
  • 0 Reply Likes
Which anti-virus program reported the virus?

IOLO TECHNOLOGIES ANTI VIRUS PROGRAM CALLED SYSTEM SHIELD.

What is the exact URL where you downloaded the file?

AT THE ADOBE WEBSITE

Have you confirmed with multiple anti-virus programs, and submitted file to your anti-virus software provider? Most files flagged as virus'd are false positives.

YES - 2 ANTI-VIRUS PROGRAMS I HAVE ON MY LAPTOP CONFIRMED THE VIRUS INFECTION & IDENTIFIED IT, PLUS IT'S LOCATION. NORMALLY IT IS IMPOSSIBLE TO CONFIRM WITH MULTI ANTI-VIRUS PROGRAMS AS MOST TECH SUPPORT PEOPLE WILL TELL YOU TO ONLY HAVE ** ONE ** ANTI-VIRUS PROGRAM ON YOUR COMPUTER. OTHERWISE THEY CONFLICT WITH EACH OTHER & CAUSE EVEN MORE PROBLEMS ON YOUR COMPUTER. IN MY CASE - YES, ANOTHER ANTI-VIRUS PROGRAM CONFIRMED THE SAME VIRUS INFECTION AS WELL. THE OTHER ANTI-VIRUS PROGRAM WAS CALLED ADVANCED SYSTEM PROTECTOR. IT WAS ONLY MY IOLO TECHNOLOGIES SYSTEM SHIELD ANTI-VIRUS PROGRAM THAT POSTED A NOTIFICATIONS WINDOW BOX ON MY DESKTOP TO ALERT ME OF THE VIRUS ATTACK. NO - IT DID NOT HAVE A FEATURE BY WHICH TO SUBMIT MY FILE TO MY ANTI-VIRUS PROVIDER - NOTIFICATION TO ME ONLY ON MY DESKTOP. THIS VIRUS WAS DEFINITELY NOT FALSE POSITIVE, DUE TO SUDDEN CHANGE IN MY LAPTOP'S PERFORMANCE !!

EXACT PATH OF VIRUS INFECTED ADOBE DOWNLOAD FILE ON MY LAPTOP:

C:/USERS/ADM/DESKTOP/ADMPROGRAMS/ADOBE/ADOBE PHOTOSHOPLIGHTROOM 5.4/INSTALL LIGHTROOM 5.EXE

EXACT NAME OF THE INFECTED ADOBE DOWNLOAD FILE:

ADOBE PHOTOSHOP LIGHTROOM 5

EXACT NAME OF VIRUS:
W32/Zbot.PM.gen!.Eldorado

TYPE:
MALICIOUS SOFTWARE

ACTION:
QUARANTINED

Don't get me wrong: it's worth taking this sort of thing seriously - just be aware: it's probably not a virus (since multiple persons are presumably downloading the very same file without such virus being detected).

I APPRECIATE YOUR ADVISE. I TOOK THIS MATTER VERY SERIOUSLY DUE TO DESKTOP ALERTS I GOT FROM MY IOLO TECHNOLOGIES ANTI-VIRUS PROGRAM. PLUS MY LAPTOP PERFORMANCE WAS IMMEDIATELY AFFECTED. I MANAGED TO QUARANTINE & CLEAN THE ENTIRE VIRUS INFECTION FROM MY LAPTOP. SOON AFTERWARD, MY LAPTOP GOT UN-CLOGGED & STARTED WORKING WELL AGAIN........FORTUNATELY I WAS ABLE TO DO IT ALL MYSELF. MOST LIKELY OTHER PEOPLE MIGHT NOT KNOW HOW TO REPORT SUCH PROBLEMATIC VIRUS DOWNLOADS TO ADOBE WHICH STEM FROM THE ADOBE WEBSITE. OR...........THEY ARE TOO LAZY TO REPORT IT. OR.....THEY DO NOT KNOW HOW TO QUARANTINE & REMOVE AN INFECTED VIRUS FROM THEIR COMPUTER.

Summary: step 1 - determine if real virus or false positive..

I DO NOT FEEL IT WAS FALSE-POSITIVE. THE VIRUS INFECTION SERIOUSLY AFFECTED PERFORMANCE OF MY LAPTOP. IT CAUSED MY LAPTOP TO CLOG UP & JAM UP & THE INFECTED VIRUS SEVERELY SLOWED DOWN MY LAPTOP'S PERFORMANCE.

Note: if it *is* a real virus, then the question still remains: did it become infected after download, or was it already infected. If the former, then your system was already compromised, if the latter it may also be due to compromised system (depends on how you ended up with the download page / download link).

MY LAPTOP WORKED GREAT BEFORE I DOWNLOADED THE ADOBE DOWNLOAD FILE FROM ADOBE WEBSITE. THUS IT WAS THE LATTER - THE ADOBE PHOTOSHOP LIGHTROOM 5 DOWNLOAD FILE (EXE - EXECUTABLE INSTALLATION TYPE FILE) WAS CLEARLY INFECTED. MY ANTI-VIRUS PROGRAMS CLEARLY IDENTIFIED IT'S NAME & PATH ON MY LAPTOP !!

If the file really is (was) infected on Adobe site - I'm sure we'll all be hearing about it in short order.

IF PEOPLE ARE SMART ENOUGH HOW TO REPORT IT TO ADOBE, THEN YES - YOU WILL SURELY HEAR MORE COMPLAINTS & ALERTS FROM PEOPLE ABOUT THIS INFECTED DOWNLOAD FILE AT THE ADOBE WEBSITE. IT'S TRUE THAT THERE ARE INFECTED DOWNLOAD FILES AT AUTHENTIC WEBSITES - EVEN MICROSOFT. TECH SUPPORT PEOPLE TELL ME THAT SOME MICROSOFT UPDATES DOWNLOADS FROM MICROSOFT WEBSITE ARE CORRUPT & INFECTED WITH VIRUSES !! ARE PEOPLE SAFE GETTING WINDOWS UPDATES ON THEIR COMPUTER USING THE WINDOWS UPDATE ICON IN THEIR CONTROL PANEL ?? **** NOT REALLY **** FORTUNATELY, YOUR ANTI-VIRUS PROGRAM WILL IDENTIFY THE SPECIFIC NAME OF THE INFECTED VIRUS FILE & WHERE IT IS LOCATED ON YOUR COMPUTER.
Photo of Chris Cox

Chris Cox

  • 20280 Posts
  • 812 Reply Likes
First, turn off the caps lock key.
Then contact your antivirus maker so they can check for a false positive (which is what these reports always turn out to be).

Adobe scans the installers and updaters, and the servers, regularly for viruses and malware.
Photo of Anna Mikiewicz

Anna Mikiewicz

  • 7 Posts
  • 0 Reply Likes
I had my Caps Lock Key on to distinguish my answers from all the various questions Rob Cole had asked me. The exact name of the virus infection my Iolo Technologies System Shield (Anti-Virus Program) identified it as is: w32/Zbot.PM.gen!Eldorado. I Googled it & it is indeed a valid virus. Specifically, here is MicroSoft Malware Protection Center's explanation of it: http://www.microsoft.com/security/por...
Photo of Chris Cox

Chris Cox

  • 20280 Posts
  • 812 Reply Likes
It may be the name of a virus, but the Adobe downloads don't contain that virus (or any other known virus). And your details aren't quite matching the Adobe website or filenames.
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
1st: I'm sorry for your troubles - not saying it was my fault, but I sympathize..

2nd: If it was affected ON ADOBE'S WEBSITE, then lotsa people will have had the problem, and we'll be hearing about it, on other websites too.., plus I'm sure Adobe themselves would issue a statement (announcement..). - like they did when their security was compromised a few months ago.

If such does NOT happen, then I strongly recommend reconsidering how you (and not others) came to such a predicament. For example, if you started by clicking on a link in an email - your web experience could have been via a hacker's proxy (which forwards all real pages to you, but with some devious exception(s)).

I'm not being defensive on Adobe's behalf, just tryin' to have your back..

Summary: *if* others were subjected to the same infected file as you, we'll all know about shortly. If not, then you need to put your computer in front of a mirror, and stand next to it, to see where the problem originated.
Photo of Anna D. Mikiewicz

Anna D. Mikiewicz

  • 8 Posts
  • 0 Reply Likes
No problem - thx for your advise. Are you a WebMaster at Adobe Website ??

I checked the Adobe Website at http://www.adobe.com. Seems this is where my problem began. At left side, it provided a Link called "LightRoom To Craft This Image". When I clicked on the word LightRoom, it took me to a new page at this Website: http://www.adobe.com/products/photosh.... At Top Center Section I clicked the Blue Box called "Download Trial". YES - these are all authentic Adobe Websites. That is where I got the Adobe Download.
Photo of Chris Cox

Chris Cox

  • 20280 Posts
  • 812 Reply Likes
Did the "Download Trial" button take you to a second page and the Creative Cloud downloader, then download and install lightroom from the CreativeCloud app?
Photo of Anna Mikiewicz

Anna Mikiewicz

  • 7 Posts
  • 0 Reply Likes
No - I do not recall using any Creative Cloud downloader. I provided you the 2 Adobe Website Links. Today just now I again opened the 2nd Website I provided you above & I noted the "Download Trial Version" Button is now gone.
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
The name of the file downloaded should be: Lightroom_5_LS11_win_5_4.exe

I would seriously consider re-checking your download history for the ****EXACT **** URL from where you downloaded.

For example, I got mine from here (in Firefox, press Ctrl-J... ):

http://download.adobe.com/pub/adobe/lightroom/win/5.x/


Final thought: A virus'd exe lays in wait - it's evil is only unleashed when you execute it. And Adobe has anti-virus software running on their download server, browsers have built-in anti-virus in their downloaders, and your local anti-virus program from iolo should have kicked in if/when you executed the exe file, if it were virus'd at that time. None of these things are fool-proof of course, but if I seem skeptical, it's because I am.
Photo of Anna D. Mikiewicz

Anna D. Mikiewicz

  • 8 Posts
  • 0 Reply Likes
Correct. Unfortunately, Anti-Virus programs do not always catch an virus infected executable file BEFORE it installs to a Computer. I am skeptical as well...........including skeptical of any Anti-Virus Program - none are fool-proof !!
Photo of Steve Sprengel

Steve Sprengel, Champion

  • 2611 Posts
  • 333 Reply Likes
Yeah, "Install Lightroom 5.exe" does NOT sound like an Adobe installer.

What process did you use to download or otherwise get the file with that name?
Photo of Anna D. Mikiewicz

Anna D. Mikiewicz

  • 8 Posts
  • 0 Reply Likes
Please see my comment / reply to Rob Cole - thx :)
Photo of Steve Sprengel

Steve Sprengel, Champion

  • 2611 Posts
  • 333 Reply Likes
Referring to your reply to Rob Cole:

When I go to www.adobe.com I don't see a link at the left that says LightRoom To Craft This Image, but I am logged in with my AdobeID and going to the site from the US. Perhaps you see different things in different parts of the world or when not logged in or Adobe knows what I have purchased and is giving me different things to click on than you see.

When I go to the second link you give, http://www.adobe.com/products/photosh..., I see the following page which does not have a blue button to download LR in the top center, but rather the black text "Try" down at the lower right:


If I hover over the word "Try" it goes to:
http://www.adobe.com/go/trylightroom/

which redirects to this page with a yellow Download Now button:
https://www.adobe.com/cfusion/tdrc/in...

The file that gets downloaded when I click that Download Now button is:
http://trials3.adobe.com/AdobeProduct...
where the filename is: Lightroom_5_LS11.exe

So I'm suspicious of the installer EXE you're showing since it doesn't match what I'm seeing, but maybe I'm starting in the wrong place or clicking on something different.

Can you provide a more detailed set of steps that you go through, including the URLs that the buttons and links point to before you click on them? And if you can, screenshots of the pages you are going to? Since they are different that what I'm seeing when I go to the URLs?
Photo of Anna Mikiewicz

Anna Mikiewicz

  • 7 Posts
  • 0 Reply Likes
Thank you for all your details. Sorry for any inconvenience I may have caused to anyone.............that was NOT my intent.

Per ScreenShot you inserted, your explanations are all correct. Your method is NOT the way I accessed the Adobe Trial Download. The way I had accessed it is there used to be a "Download Trial Version" Button at the top of your Example ScreenShot Page. But today it is very interesting to note that the "Download Trial Version" Button is now GONE !! ** STRANGE ** Someone removed it - it was there yesterday.

The verbage I described at Adobe.com is still there & the Link for Adobe PhotoShop Lightroom is still attached within the word "LightRoom". Your ScreenShot is the exact page as I described after you right click on the word "LightRoom" (I opened it in a new Tab).

FIND THIS EXACT VERBAGE AT TOP LEFT OF ADOBE.COM WEBSITE:
One Moment. Infinite Possibilities.
Vancouver Based Photographer
Bal Deo Used PhotoShop And
LightRoom To Craft This Image
With His Creative Cloud Membership, He's
Doing Some Of The Best Creative Work In The World.
You Can Too.

INSTRUCTION:
Hover your mouse over the word "LightRoom" in above verbage. It is a link. Right click & open it in a new Tab. It takes you to exact page of your ScreenShot.

I found another 2nd alternate method to download TRIAL VERSION of Adobe PhotoShop LightRoom 5. #1) Go to very bottom of your ScreenShot Adobe Website Page. Go to Dark Gray Box Section at very bottom. In the 2nd Column, click "Product Trials" under "Download" Heading. The Next Website Page is the Adobe Trial Downloads Page - it lists all Trial Downloads for various Adobe Programs. Sorry - I do not have the ability to send you Screen Shots with Red Arrow to mark exact spots on ScreenShot Pages. But I listed for you the exact Websites below:

#1) To Access Adobe Product Trials Website:
http://www.adobe.com/products/photosh...

#2) Adobe Trial Downloads Website & Select PhotoShop LightRoom 5: http://www.adobe.com/downloads.html?p...

#3) Adobe Trial Download For PhotoShop LightRoom 5 with same Yellow Button you found:
https://www.adobe.com/cfusion/tdrc/in...

The only history I have is explained in my 1st Comment / Reply I posted to Rob Cole using CAPS LOCK as listed above. I used CAPS LOCK to keep my replies separate Rob's questions in hopes it would be easier for him to read. I provided him the exact path of the Adobe Download File on my Laptop which got infected with a virus. This is the best I can do !!

Sorry - I did not intent to create problems or upset anyone nor cause all these back & forth emails & comments at this Website.

Again - the exact path of the Adobe Download File on my Laptop is listed below. Please note it clearly specifies it is an ADOBE .exe type file:

EXACT PATH OF VIRUS INFECTED ADOBE DOWNLOAD FILE ON MY LAPTOP:

C:/USERS/ADM/DESKTOP/ADMPROGRAMS/ADOBE/ADOBE PHOTOSHOPLIGHTROOM 5.4/INSTALL LIGHTROOM 5.EXE
Photo of Chris Cox

Chris Cox

  • 20280 Posts
  • 812 Reply Likes
Don't use CAPS LOCK - that is considered shouting, and most people won't even read the text posted in all caps.
Photo of Anna D. Mikiewicz

Anna D. Mikiewicz

  • 8 Posts
  • 0 Reply Likes
Understood. My prior post clearly explained why I use Caps Lock. It hopefully makes my Comment a bit easier to read - especially if it is lengthy. There is no format feature by which to use bold or italic or underline when I reply.
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
Hi Anna - I miss the "quote" feature of the user forums too - it is hard to reply point-by-point in this forum. FWIW you can type html directly in - granted you have to know html - crash course:

Italic: <em>this would be italic</em>
Bold: <strong>this would be bold</strong>

And for quoting, some of us have adopted this convention:

So-and-so said:
|> "yada-yada..."
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
'Install Lightroom 5.exe' is the installer I get after running what is for me Lightroom_5_LS11_win_5_4.exe

My 'Install Lightroom 5.exe' (I just downloaded another copy of
http://download.adobe.com/pub/adobe/lightroom/win/5.x/Lightroom_5_LS11_win_5_4.exe
and ran it):
MD5: 84108FF34889C10E0659183DA2F565A8
SHA1: C0877FB9EFCE83BA59B9DA58435BD3678921C1A1

You can compare to yours by visiting:

http://onlinemd5.com/
Photo of Anna Mikiewicz

Anna Mikiewicz

  • 7 Posts
  • 0 Reply Likes
Thanks, Rob. Yes - clearly the path of my Adobe "exe" type file was different than yours. I provided it earlier, but here it is again. It clearly indicates it was an Adobe Download "exe" type file.

EXACT PATH OF VIRUS INFECTED ADOBE DOWNLOAD FILE ON MY LAPTOP:

C:/USERS/ADM/DESKTOP/ADMPROGRAMS/ADOBE/ADOBE PHOTOSHOPLIGHTROOM 5.4/INSTALL LIGHTROOM 5.EXE
Photo of Steve Sprengel

Steve Sprengel, Champion

  • 2611 Posts
  • 333 Reply Likes
Ok, that explains it. So, yeah, it's a false positive, to be reported to the virus-scanner company.

And an exception can probably be added in the virus scanning program so it doesn't trigger a false alert.
Photo of Anna Mikiewicz

Anna Mikiewicz

  • 7 Posts
  • 0 Reply Likes
Yes !! The Virus Total Website that Steve checked:

https://www.virustotal.com/en/file/01...

It identified the exact same Virus Infection I got from the Adobe ".exe" file as:

W32/Zbot.PM.gen!Eldorado

This is the identical name which my Anti-Virus Program isolated.

Per exact path of Adobe ".exe" download file on my laptop, I Googled the last portion of it as "install lightroom 5.exe" & results of my Google Search traced it back to Adobe related Websites:

GOOGLE SEARCH RESULTS FOR "install lightroom 5.exe":

https://www.google.com/search?q=insta...

Also - please take a look at this interesting Website - see if it helps you any:

http://www.herdprotect.com/install-li...
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
Hi Anna,

What would be especially helpful now, if you are game, is:

* the URL from where the file came (the actual internet address, not guessed at, and not a path on your local machine) - there is only one way to determine it - from your browser download log. I gave instructions above for Firefox - which browser are you using?
* the MD5 checksum of the suspect 'Install Lightroom 5.exe' file, instructions for how to obtain it were also provided in a previous post - please let me know if there are any questions or problems to obtain it.

Steve's conclusion: Although 1 of 52 virus checkers did report a virus, since the checksum of the file is same now as it was before, the file has not been altered and is NOT virus'd, The one scanner which did report a virus was most certainly a false positive - in his case. - probably in your case too, although it's not certain, yet. Luckily there are ways to be sure - see 2 bulleted items above.

I wouldn't blame you if you're ready to drop it, but it's currently seeming like:
* the file you downloaded was either not virus'd or was not downloaded from Adobe's server.

Rob
Photo of Anna D. Mikiewicz

Anna D. Mikiewicz

  • 8 Posts
  • 0 Reply Likes
Hello Rob - Did you read my above reply to Steve ?? Also, did you read all of my replies posted to each person ?? At this point, I provided many details - as
many as I possibly could. Yes.......I am getting ready to drop it & finish it all.

Seems Steve already concluded my virus was a false positive.

I gave Steve the exact Adobe Website URL of where I got the Adobe download. (No, I did not guess it). The Browser I use is Google Chrome, but my Downloads Folder is empty.

So info I now have is extremely limited. WHY ?? After I got the virus, I deleted everything I could possibly find on my Laptop related to Adobe PhotoShop Lightroom. There was only ONE thing I saved - I saved the Iolo System Shield (Anti-Virus) Disinfection Summary Report. It lists all Blocked or Quarantined Files on my Laptop since NOV 2, 2013. Additionally - yes - it lists entire path of the Adobe Download.

I am happy to send you a Screen Shot of it. I do not know how to insert Screen Shots into this Box, but can email it to you if you provide me your email address.

Beyond this Screen Shot - there is nothing further I can provide you.

Steve inserted a Screen Shot into one of his replies, but I do not know how he did it.

Again - I found this Website interesting:

http://www.herdprotect.com/install-li...

Quite a few details listed on this website page exactly matched the path of my Adobe Download file. It even gives you the MD5, SHA-1, and SHA-256 of "install lightroom 5.exe".
Photo of Anna D. Mikiewicz

Anna D. Mikiewicz

  • 8 Posts
  • 0 Reply Likes
As a final - I can send the ScreenShot to IOLO of the IOLO System Shield Disinfection Summary Report I saved on my Laptop. Additionally, I can call IOLO & speak to them about it. NOTE: My IOLO ScreenShot indicates I got the same exact virus W32/Zbot.PM.gen!Eldorado on another date last year on April 24, 2013 from an ATI Technologies Download. You will see this if & when I email you the ScreenShot - I need your email to send it to you. I tried the conventional method to paste the ScreenShot into this Comment Box, but it did not work.
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
Hi Anna,

I have read all your posts, but without the exact download URL (not the url where you started, or where you think you were when you clicked a link... but where *exactly* the file actually came from, NOT where it landed on your disk) and/or MD5, it's impossible to tell much.

I suspect Steve is right, but if the info is no longer available to prove it one way or the other, it's sortofa moot point - doncha think? - time to move on I think..

PS - the MD5/SHA checksums at herdprotect (which were the same as those I posted here) would have helped if you hadn't deleted the files needed to compute them for comparison - next time.. ;-}.

PPS - Screenshots of IOLO report and virus name are not much help at this point - thanks though: water under the bridge..

Rob
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
In case it wasn't clear the purpose for posting the MD5 & SHA1 values.

If your MD5 matches mine, then it was a false positive (mine is not virus'd). If it doesn't, then it's a different file - maybe virus'd or maybe something else I don't understand yet.

All you have to do is drag your 'Install Lightroom 5.exe' file and drop on the onlinemd5 webpage to check. Reminder: this file can't hurt you (even if riddled with viruses) unless you execute it, so just be careful not to double click it when dragging and dropping.. Go ahead and take it out of quarantine if need be in order to compute the checksum (e.g. MD5).
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
To get download URL:

Firefox (Ctrl-J):

(that puts it on the clipboard - you can then paste it here in a post)
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
Anna,

Summary: the downloadable files on Adobe's servers are not and were not virus'd. So, either you downloaded something else from somewhere else, or your virus scanner(s) reported a false positive (or they were infected after download..). There are ways to figure out which, but not without answering critical questions.

The path to the install file on your machine does not help, the URL from where the source exe was downloaded is critical, as is the MD5 checksum of the install file (as mentioned previously).

At the risk of seeming like a hard-A: if you want to resolve your issue, then answer the questions I've asked, as I've asked them. If, after reviewing the relevant posts in this thread, you still don't know how to get the answers - speak up...

If you just want to chalk it up as "one of those things" then so be it, but you'll be wasting your time and the time of others trying to convince Adobe of something they've already firmly decided against, without taking the necessary steps to see it through to the end.. - it's up to you.

Hope you don't take this the wrong way - the tone is indeed a bit stern, but so far you have successfully dodged the critical questions. You seem convinced of something that probably isn't true - so what you gonna do now?

Rob
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
For future reference - if you think you have a virus'd file, don't delete it (and don't execute it either until you investigate..) - save it (consider changing the extension), so you or somebody else can scrutinize it, like your anti-virus provider or a fellow forumer. Also, save the download link, so you or another can determine if it is legitimate and try downloading file from same place..
Photo of Anna D. Mikiewicz

Anna D. Mikiewicz

  • 8 Posts
  • 0 Reply Likes
I compliment all of you for your integrity to thoroughly research this matter. I do respect your concerted efforts to examine this issue.

It was not my intention to create any PANIC nor UPSET at Adobe.

Sorry you are getting irritated & frustrated with me. Let me explain..............to you perhaps it seems that I am not answering ALL of your specific questions. But if I no longer have the data on my Laptop which you seek, I cannot provide it to you. I only have "little to none" DATA left on my Laptop related to this specific incident.

As I previously explained I deleted EVERYTHING on my Laptop I could find related to Adobe PhotoShop LightRoom, except the IOLO Virus Report.

Thus, I hope to close out this issue very soon !!

I am not a Tech Support person by nature, so some Tech Talk might be bit foreign to me such as MD5. But so far, I feel I kept up with it all very well. With limited info I have left on my Laptop, I answered you to the best of my ability. I have integrity as a person & did my best to "see it thru to the end". Only thing left I can do is send you a ScreenShot of IOLO Virus Infection Report still on my Laptop.

I never tried to convince anyone at Adobe of anything. I never accused nor pointed a finger at anyone at Adobe. In fact, the first sentence I originally said was " i THINK i got a virus while downloading lightroom today". I used the word "THINK".

I respect your responsibility at Adobe & your concern about the integrity of Adobe Downloads available to the General Public.

I do not know what MD5 is, but MD5 for exact Adobe Download File I installed is:

84108ff34889c10e0659183da2f565a8

I got this MD5 at this Website.
http://www.herdprotect.com/install-li...

The top of this website page lists the Adobe Download exactly as it was described in the path on my Laptop as "install lightroom 5.exe".
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
Anna,

No problem here - I understand how disconcerting this kind of thing can be.

But, since you've deleted the installer file, an MD5 copied from a known reference source won't do any good, since it is only half the info needed, the other half must come from the actual file, which unfortunately no longer exists.

And since you don't have the downloaded file URL, it can't be redownloaded.

Sorry, but there is nothing more anybody can do for you at this point - glad you got things running again..

PS - I'm not an Adobe employee or consultant - just a user like you, albeit well-educated in computers & internet.. :-).

Rob
Photo of Anna D. Mikiewicz

Anna D. Mikiewicz

  • 8 Posts
  • 0 Reply Likes
I figured out how to insert a ScreenShot into my comment. The ScreenShot I inserted in my prior reply is the IOLO System Shield Disinfection History Report from my Laptop. This is all I have left related to this issue.

Once again - thank you for all of your concerted efforts.
Photo of Rob Cole

Rob Cole

  • 4831 Posts
  • 379 Reply Likes
Kudos on the screenshot - that skill may be helpful for the next problem ;-}.