Versions

10.1.5.33	11.29%
10.1.4.38	9.14%
10.1.3.23	0.54%
10.0.1.434	2.15%
9.5.3.305	17.20%
9.5.2.295	14.52%
9.5.1.283	3.23%
9.5.0.270	1.61%
9.3.3.177	2.15%
9.3.2.163	0.54%
9.3.0.148	4.84%
9.1.0.2009022700	10.75%
9.0.0.2008061200	7.53%
8.3.1.289	7.53%
8.0.0.0	1.61%
8.0.0.0	3.23%
8.0.0.0	2.15%

Warning 7 antivirus scanners has detected malware in various versions of reader_sl.exe.

reader_sl.exe has 17 known versions, the most recent one is 10.1.5.33. reader_sl.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. In order execute the program with adminsitrator rights and prevent a UAC prompt, the program will add a job to the Windows Task Scheduler that will automtaiclaly start it when a user logs on. The average file size is about 36.67 KB. It is an authenticode code-signed executable issued to Adobe Systems by the certification authority VeriSign. The programs Adobe Photoshop CS6, Adobe Reader 9.4.0 and Adobe Reader 9.4.7 have been observed as installing specific variations of reader_sl.exe. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 1.66 MB with the maximum memory reaching around 5.14 MB.

Adobe Acrobat SpeedLauncher. Adobe Acrobat is a set of application software developed by Adobe Systems to view, create, manipulate, print and manage files in Portable Document Format (PDF). Acrobat and Reader are widely used as a method of presenting information with a fixed layout similar to a paper publication.

Based on 40+ industry antivirus scanners, 7 of them detected the following malware.