2

When I create PDF file from my particular DOCX file, it gets infected with the virus. But if I create a new DOCX file and create PDF from that, it doesn't get infected with the virus.

I have tried to solve the issue with Malwarebytes but it didn't work. Only AVG and AVIRA antivirus detect this malware but rather than neutralizing it, it is removing the file.

Is there any way to remove this malware manually?

abc
  • 123
  • 1
  • 1
  • 3
  • 1
    Possible duplicate of [Help! My home PC has been infected by a virus! What do I do now?](https://security.stackexchange.com/questions/138606/help-my-home-pc-has-been-infected-by-a-virus-what-do-i-do-now) – Steffen Ullrich Jan 27 '19 at 05:26
  • 2
    Not a duplicate of that. The PC is not infected: AVG/Avira has detected a link to a malicious site in the PDF. Easy to fix. – Esa Jokinen Jan 27 '19 at 10:50

1 Answers1

3

The detection of PDF.UrlMal-inf [Trj] is related to the PDF contents: the file itself isn't harmful, but contains URLs (links) to sites that have been found malicious. That's why an empty file can never be infected with a PDF.UrlMal-inf.

  1. Search your .docx file for hyperlinks.
  2. Test these URLs with e.g. VirusTotal.
  3. Manually remove the links that have been found malicious.
  4. Convert the PDF again.

In order to neutralize the file, an AV would need to be able to create working PDF files.

Esa Jokinen
  • 16,100
  • 5
  • 50
  • 55