PDF Virus

Shane O' Malley

Anyone getting loads of pdf viruses tonight.

Can find some notes of it on google but nothing concrete.

Don't want to set the network for delete mode if it is a false positive.

ActorSeeksJob

PDF files do contain security vulnerabilities, so we always have users update their Adobe Reader to be safe. Don't see many viruses coming that way but im sure there is a few. If you want me to check your PC do the following


Download WinPFind3U.exe to your Desktop and double-click on it to extract the files. It will create a folder named WinPFind3u on your desktop.

• Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program.
• Under Additional Scans on the bottom right, check the boxes for Reg - Disabled MS Config Items, Reg - Uninstall List.
• Now click the Run Scan button on the toolbar.
• When the scan is complete Notepad will open with the report file loaded in it.
• Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Use the Add Reply button and Copy/Paste the information back here. I will review it when it comes in. If, after posting, the last line is not < End of Report > then the log is too big to fit into a single post and you will need to split it into multiple posts.

Rebeller

This might be of interest.

Shane O' Malley

Think you might be on the money Rebeller.

I have about 120 computers to search through. Looks like a few received the pdf in their e-mail before our AV started picking it up but no infections yet.

I have a feeling most of the pdf's got put in the spam folders anyway so users were not looking them up.

Got files coming from at least 10 different ip addresses already this evening.

As it is not a false positive i will run a scan and clean on the computers.

Cheers

Shane

FruitLover

This might also be of interest.

Shane O' Malley

It is not really the reader i was wondering about, just had no information on the new type of virus hidden in pdf files.

Got it now and the AV is blocking it at the gateway.

Have set all the computers to update to the new version of the Adobe Reader.

Cheers

Shane

Capt'n Midnight

Out of curiousity do PDF viruses affect any reader other than acrobat ?

Shane O' Malley

From what i am reading it appears that it is targeting a vulnerability in the Adobe Reader and how it handles mailto: commands

However i do not know if other reader suffer from the same issue.