Clubwrx Infected or linked to something bad?

[T0rque]

I just got a pop up run across my lap top screen... WTF is goin on club dub?

[WRXie]

I just got a pop up run across my lap top screen... WTF is goin on club dub?

I just got that too. As soon as read your post. Bo.. I blame you.

[2ndSuby]

Ditto ...

[Sasquatch]

I just got a pop up run across my lap top screen... WTF is goin on club dub?

I just got that too. As soon as read your post. Bo.. I blame you.

Ditto ...

What is it saying?

[devilfluff]

Avast threw up a malware warning today.

[Rogan]

got this just now...

[BlazinWRX]

I'll take care of it tonight. I don't know if its' the banner or what but everything seems to be okay on the site itself.

[Speedette]

I've been getting the Avast alerts like crazy (Firefox, PC), but only at home (Windows 7). I work in Ad Operations and deal with Malware (and Malvertising) ALL the time at work, so I did some investigating, but I don't believe it's coming from the advertisements. Here's what I found...

Malware name: JS:Pdfka-gen
First appearance: January 2010
Solution: Download latest version of Adobe programs
Adobe - Security Bulletins: APSB10-09 - Security update available for Adobe Reader and Acrobat


This malware exploits known vulnerabilities in Adobe Acrobat and Reader. Install the updates available from the vendor so that your software is no longer affected by these vulnerabilities.

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods

Does vBulletin use Adobe Reader or Adobe Acrobat to create the site? I don't know the connection between ClubWRX and Adobe Reader, but all sources point to the exploit being with Adobe.


Sources:
Encyclopedia entry: Exploit:Win32/Pdfjsc.CR - Learn more about malware - Microsoft Malware Protection Center
Adobe Reader vuln hit with unusually advanced attack ? The Register
Exploit-PDF.q.gen!stream


Security Bulletin via Adobe:
http://www.adobe.com/support/security/bulletins


I don't think this is something ClubWRX/Tim can fix, seems that users just need to update their Adobe software until a fix is put into place.

I just updated mine, I'll let y'all know if I continue to get alerts!

[Graham46]

Just puttin in my 2 cents... I still run XP, and I use the latest version of FireFox. I have never seen one of these pop ups or had any types of threat of malware or virus since registering with this site... Adobe prompted me for an update for Acrobat yesterday and I got it. I will let you guys know if something changes and I am receiving these messages too!

[Speedette]

Malware name: JS:Pdfka-gen
First appearance: January 2010
Solution: Download latest version of Adobe programs
Adobe - Security Bulletins: APSB10-09 - Security update available for Adobe Reader and Acrobat

I just updated mine, I'll let y'all know if I continue to get alerts!

Updated Adobe Reader, restarted, visited ClubWRX, no alerts finally!

*knocks on wood*

[Rogan]

after updating adobe yesterday, got this today...

[Speedette]

after updating adobe yesterday, got this today...

Did you update both Adobe Reader and Adobe Acrobat? Very odd, the fix totally worked for me, but it looks like you're receiving another PDF Exploit. Perhaps try completely uninstalling and re-installing your Adobe Reader program? When I first tried upgrading my version of Adobe, it was acting funky so I upgraded from a lower version.

And this is pretty much where my IT expertise starts to dwindle... LOL

[SeattleJeremy]

Did you update both Adobe Reader and Adobe Acrobat?

I just reinstalled my machine, and have yet to install Acrobat Reader.
I received this when I just opened ClubWRX.

[Sasquatch]

There are active exploits for Java 6 update 19 and earlier. 20 was just released.

[mycologist]

Thanks Bill.