≡ Menu

AVG detects Trojan Horse Crypt.CFR in Adobe CS4 Installers

AVG Free antivirus software detects Adobe CS4 softwares as Trojan Horse.AVG Free today detected Trojan horse Crypt.CFR in Common Files/Adobe/Installer/ ~random letters~/Setup.exe.There has been a lot of cases reported today about the adobe installer as a virus in adobe and avg forums.


Adobe Trojan infection was reported to be found on systems installed with any of the latest Adobe CS4 trial versions of Photoshop ,Dreamweaver, InDesign and Illustrator.

Reported cases:

“I downloaded trial versions of InDesign, Illustrator and Dreamweaver direct from adobe.com last week, installed them, but kept the install files for future reference. Then this evening I get multiple virus warnings, alerting me to the presence of the Crypt.CFR trojan in all the setup.exe files.
There’s no mention of Crypt.CFR anywhere on the internet, as far as I can see, and no mention of false positives with recent Adobe products – just the cracked Photoshop CS4 and the Flash thing from last year. I find it hard to believe that there are new trojans in official CS4 downloads, but it’s strange that no-one else is reporting this. I’m on 8.0.176, with virus pack 270.10.14/1917. Anyone had similar issues? I’m on a brand new computer and haven’t got the hang of Vista yet, so am unable to upload the setup.exe files to jotti or virustotal – keeps telling me I’m not allowed!” –EthylMormon from Avg forums

“The same thing happened to me this morning, AVG said it’s a Trojan from the Adobe Dreamweaver installer, but I don’t think it came from Adobe, I’ve had this on my machine for over a month without a problem. I removed Dreamweaver after putting the Trojan into the virus vault and about 10 mins later it turned up attached to something else. I know Adobe can be very invasive, that’s down to aggressive marketing on their part but I don’t believe an organization of their reputation would knowingly deliver malware. It is strange though that it only being reported today”- Cliff from Yahoo Answers

“I’m pretty sure this is a false positive, and sorry for posting about it here, I don’t know where else do go. The setup of the support forums is confusing me.
Anyway, AVG Free detected a "Trojan horse Crypt.CFR" in Common Files/Adobe/Installer/and a bunch of numbers and letters/Setup.exe . From what I’ve read, there is no such thing as a "Trojan horse Crypt.CFR" and that this is probaby a false positive, but just to be on the safe side, I wonder if anyone else has experienced this and knows what to do.” –Aeolian from Adobe Forums

Update:As expected,it was a false positive from AVG and “trojan warning” of Adobe installer has been removed in the last definition update.

Comments on this entry are closed.

  • yani January 27, 2009, 9:35 pm

    AVG warned me too…I thought corporations was playing some jokes with trojans…..googled and came here to know that it was a false positive…

  • Franky January 28, 2009, 7:13 am

    I had the same with an original installer DVD from InCopy CS4 and AVG Network Edition 8. I had to disable the resident shield before i could install the program.

  • Anonymous January 29, 2010, 10:05 am

    I had a adobe update pop up on screen, so i allowed it to update. Ran a virus scan with AVG, and it brought up Trojan Horse Crypt.NOB


  • Anonymous January 29, 2010, 10:01 pm

    Mine says Trojan horse crypt.Nrg ?? help this is a work pc and i dont know what to do