Catch virus/trojan via Acrobat Reader

[goodbug2010]

Is it possible to catch is virus via Acrobat Reader? I was goggling the stuff on the internet and suddenly something installed in the tray of my computer and the Windows Defender panicked. I checked the internet cache, and only interesting file I can find is a PDF file([link deleted by host]). By glancing at the file in notepad, it is possible to notice there are JavaScript entries in it.

Is JavaScript by default configured to run unsafe content? I would prefer non-script-enabled Adobe Reader since most of computer comes with it pre-installed.

[MichaelKazlow]

It is possible to catch a virus or run a trojan via Reader, but unlikely. Javascript can be turned off in the preferences.It is not necessarily going to be the vector do distributing virii and trojans. Do you have Javascript turned off in you web browser, it is a much more likely attack vector than Reader. But Reader and Acrobat are catching up. May get there in a decade or so.

[goodbug2010]

It's really real. I found the article on the worm Bloodhound.Exploit.288 ( http://www.symantec.com/security_response/writeup.jsp?docid=2009-121511-4614-99 and http://www.securityfocus.com/bid/37331). I think it was run via iframe or redirect, and Adobe Reader's browser integration let run the bad stuff without even asking me.

The Javascript execution in the PDF document is enabled by default -- "good job" Adobe. And guess what: Linux is affected too. 😞

So my recommendation to all: go to preferences, turn off Javascript and remove any browser integration now. 🙂

[John T Smith]

Actually, Reader has a different forum

http://forums.adobe.com/community/adobe_reader_forums

[goodbug2010]

Thanks. But just-Adobe is affected too...

[~graffiti]

goodbug2010 wrote:

just-Adobe is affected too...

Is that a new product? Never heard of it.

If you are running Reader, be sure and update to the very latest version (9.3.1) which "supposedly" fixes this issue.

[gkaiseril]

Because PDF's can support so many different multimedia image types, it is possible to have a link to a problem image. At one time is was possible to include executable attachments that could be malicious code, just like an attachment to an emial.

So, even though Adobe patches the security holes as found, there will always be new ones as some find holes in the OS code, media files, or applications.

You best defense is to have an up to date anti Virus software, keep Acrobat/Reader patched up to date and be aware of security warnings and adjust you comuter usage as needed.

[digital mama]

Same virus crashed my computer after installing CR5 Master.  I'm almost afraid to install it again.  Still trying to fix computer.  Just spent $300 for a new

install disc for windows 7 professional.  Have we determined which program it is hiding in?

[Dave Merchant]

There are NO viruses within the legitimate installation images for Creative Suite, or any other Adobe products - 100% absolutely completely guaranteed.

If someone uses an installer image or license crack from an illegal source (torrents, fake discs, etc) it's more than likely someone will embed malware into it, but that's typical with software distributed illegally, and yet another reason not to go near it.

Creative Suite 5 ships with Adobe Acrobat 9 Pro. You are advised to ensure all updates are applied before using the product on PDF files from untrusted sources, and we also recommend that Windows users also install Adobe Reader X and set Reader X as the default PDF application for online browsing. Reader X has advanced sandboxing features which make malware injections effectively impossible (even if your antivirus software misses it) but this technology has not yet been deployed to Adobe Acrobat.

[digital mama]

Excuse me but I just laid out $3,000.00 for my CS5Master product from ADOBE.com and it crashed my computer with a nasty virus. I don't get you point here. What exactly are you trying to say?

[MichaelKazlow]

What he was trying to say is that you had the nasty virus BEFORE downloading and/or installing the CS 5 Master Collection. It only manifested itself to you n an obvious way when you downloaded or installed CS5. If CS 5 which has been out for months was virus infected people would have been screaming about it for months.

[digital mama]

Well, I can appreciate and respect those that obviously know more than I do. I say that sincerely.  I have requested the actual DVD product instead of downloading it and we'll see if that opens an environment for disaster. If it doesn't cause problems, that tells me it is the internet download. If it does, then perhaps there was a virus before.  It is interesting to me that the computer functioned without a glitch before I installed the CS5 part of adobe.  Now I have a bigger problem.  I tried to install elements 9 on our desktop XP and it too crashed.  Now I have to buy another windows version.  This is all just too thrilling for me.