• PF*.pdf file constantly written to windows/temp folder

    Home » Forums » AskWoody support » Windows » Windows 7 » Questions: Windows 7 » PF*.pdf file constantly written to windows/temp folder

    Author
    Topic
    #498619

    In viewing my resource monitor, I found very high disk usage with strange PF*.pdf files being constantly written to the windows/temp folder. Turns out there were not multiple files, but only a single file that is constantly changing its name, sometimes with apparent content (+bytes).

    When I tried to manually delete the file, the file would not delete…BUT would again change its name! All on its own! And because of that, Foxit PDF did not find any file to open. The error message was “!”.

    Virus? I ran “threat-level” Malwarebytes, MSE (both programs resident, current and running on the system), and Trend Micro (online, non-resident). I also have EMET 5.1 installed. No problems found.

    Just in case, I performed a complete system restore back to a very old date with the intention of reestablishing the computer to before any potential virus might have occurred. Yes, it was a guess. But worth a try as I have not noticed any strange .pdf’s before.

    CCleaner would not delete the .pdf file until I uninstalled Nuance PaperPort (original with computer).

    But now the file has returned, still changing its name, and using my disk resources.

    What in the world is going on????

    Many thanks,
    NLW

    Viewing 3 reply threads
    Author
    Replies
    • #1489664

      Have you checked your startup programs using either Autoruns or WhatInStartup. Autoruns produces a lot of information. You should primarily be concerned with the Logon tab. If you aren’t sure of what is listed please post a screenshot and someone here will help.

      You can also use Process Explorer to track down what process is creating the files. The Process Explorer help files should explain how to use it. There is also a Process Explorer forum at Sysinternals Forums[/url] for even more help.

      Joe

      --Joe

    • #1489727

      Thank you, Joe. I will use your suggestions for further research.
      NLW

    • #1489833

      Success. Mostly….

      I was able to stop the program from auto-starting, but have not found the .exe and cannot delete the folder.

      Even so, the weird .pdf behavior has stopped and my disk usage has calmed down.

      If a virus had overtaken the PDFProFiltSrv file, I believe it has been effectively neutralized.

      Info source:
      http://nuance.custhelp.com/app/answers/detail/a_id/5626/~/pdfprofiltsrv.exe,-nuancewds.exe-and-microsoft-windows-desktop-search

    • #1489953

      Both of the programs I mentioned show the file path.

      Joe

      --Joe

    Viewing 3 reply threads
    Reply To: PF*.pdf file constantly written to windows/temp folder

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: