Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Another Adobe Acrobatic (yayNOT)

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Virus, Worm &Trojan Alerts
View previous topic :: View next topic  
Author Message
datababe
Warrior


Joined: 13 Dec 2004
Last Visit: 10 Oct 2012
Posts: 217
Location: Inside your head

PostPosted: Wed Feb 25, 2009 5:53 am    Post subject: Another Adobe Acrobatic (yayNOT) Reply with quote

I've been following this for a bit; the latest news is less than great:
http://isc.sans.org/diary.html?storyid=5926

As earlier it looked like it could at least be mitigated by turning off JS in Acrobat:
http://isc.sans.org/diary.html?storyid=5902
http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090221

Though at least it helps some:
http://secunia.com/blog/44/

I don't have Adobe anything installed on my Windows boxen, but I treat .pdfs with caution as a rule anyway, or any file that can hit a machine with malicious embedded executable elements.

Which outside of good ole .txt files seems to be just about ANYTHING these days! Rolling Eyes
_________________
- Datababe
Until you spread your wings, you'll have no idea how far you can walk.
http://redoakranch.x10hosting.com
http://datababe007.blogspot.com
Back to top
View user's profile Send private message Visit poster's website
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 24 May 2013
Posts: 10271
Location: sunny California

PostPosted: Wed Feb 25, 2009 9:54 am    Post subject: Reply with quote

I haven't used Adobe Reader for years -- been using FoxIt. But now, FoxIt is bundling the ASK toolbar which also changes your homepage. Thumb down

I have seen malware executables that looked like text files, even have the .txt extension. It seems nothing is safe any more.
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile
Back to top
View user's profile Send private message Visit poster's website
Daveski17
Warrior


Joined: 17 Oct 2008
Last Visit: 17 Jan 2013
Posts: 118
Location: Rainy Olde England

PostPosted: Mon Jun 29, 2009 10:44 am    Post subject: Reply with quote

Is Adobe particularly vulnerable? I have 'Reader 8'. I keep it up to date.
_________________
Cry, 'Havoc!' and let slip the dogs of war.

~ Shakespeare Julius Caesar
Back to top
View user's profile Send private message
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 24 May 2013
Posts: 10271
Location: sunny California

PostPosted: Mon Jun 29, 2009 7:34 pm    Post subject: Reply with quote

Adobe Reader is exploited on a regular basis lately. They do release patches pretty quickly however.
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile
Back to top
View user's profile Send private message Visit poster's website
Chao284
Warrior


Joined: 06 Sep 2004
Last Visit: 06 Aug 2011
Posts: 220
Location: Bremerton, WA

PostPosted: Tue Jun 30, 2009 7:47 am    Post subject: Reply with quote

suzi wrote:
I haven't used Adobe Reader for years -- been using FoxIt. But now, FoxIt is bundling the ASK toolbar which also changes your homepage. Thumb down

I have seen malware executables that looked like text files, even have the .txt extension. It seems nothing is safe any more.


Well right now I see the problem seems to be linked with the latest work that seems to be connected to the all diffcult remove Torpig/Mebroot worm, also working in terms of botnetting 419 spam on a serious to severe scale, since one day I received up to 5 of the 419 scams, and I am sure this PDF exploit sure has something that may connect this with the 419 spam gangs, and worse, I think this may prove to be a bad sign here we maybe loosing the war against malware.
Back to top
View user's profile Send private message
datababe
Warrior


Joined: 13 Dec 2004
Last Visit: 10 Oct 2012
Posts: 217
Location: Inside your head

PostPosted: Tue Aug 18, 2009 5:42 pm    Post subject: Reply with quote

NEVER say that. We may lose a battle here and there, but this war ain't over. Not by a long shot!
_________________
- Datababe
Until you spread your wings, you'll have no idea how far you can walk.
http://redoakranch.x10hosting.com
http://datababe007.blogspot.com
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Virus, Worm &Trojan Alerts All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group