Author Topic: JS:Pdfka-gen problem  (Read 7504 times)

0 Members and 1 Guest are viewing this topic.

gyoung86

  • Guest
JS:Pdfka-gen problem
« on: May 20, 2010, 10:37:36 AM »
I have page on a site that is displaying a warning for malware

hxxp://www.proni.gov.uk/introduction__templehouse_papers_mic597.pdf

Could anyone else give it a look and see if they are getting the same warning?

Thanks
« Last Edit: May 20, 2010, 11:35:52 AM by gyoung86 »

Offline JuninhoSlo

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 849
Re: JS:Pdfka-gen problem
« Reply #1 on: May 20, 2010, 10:46:53 AM »
I have page on a site that is displaying a warning for malware

hxxp://www.proni.gov.uk/introduction__templehouse_papers_mic597.pdf

Could anyone else give it a look and see if they are getting the same warning?

Thanks

Yes I get the same warning Plz change http:// to hxxp://
« Last Edit: May 20, 2010, 11:33:29 AM by JuninhoSlo »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: JS:Pdfka-gen problem
« Reply #2 on: May 20, 2010, 11:26:51 AM »
Yes I get the same warning Plz change http:// to hxxp://

You also, please..!! (in the quotation)
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

gyoung86

  • Guest
Re: JS:Pdfka-gen problem
« Reply #3 on: May 20, 2010, 11:36:53 AM »
An solutions on how to remove this?

I'm the website hoster for them

Offline Yanto.Chiang

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1371
  • Soli Deo Gloria
    • PT Garuda Sinatriya Globalindo
Re: JS:Pdfka-gen problem
« Reply #4 on: May 20, 2010, 12:44:45 PM »
I have page on a site that is displaying a warning for malware

hxxp://www.proni.gov.uk/introduction__templehouse_papers_mic597.pdf

Could anyone else give it a look and see if they are getting the same warning?

Thanks

Hi,

From the result this link is safe referenced to :

http://safeweb.norton.com/report/show?url=http://www.proni.gov.uk/introduction__templehouse_papers_mic597.pdf&x=0&y=0

http://www.unmaskparasites.com/security-report/

http://www.mywot.com/en/scorecard/www.proni.gov.uk

But from avast scanner got :

avast! [User]: File "http://www.proni.gov.uk/introduction__templehouse_papers_mic597.pdf" is infected by "JS:Pdfka-gen [Expl]" virus.
"%3" task used
Version of current VPS file is 100520-0, 05/20/2010

Need to revealer the script is it real infected or FP?

cheers,
Yanto Chiang | IT Security Consultants | AVAST Premium Security | GarudaSinatriya

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: JS:Pdfka-gen problem
« Reply #5 on: May 20, 2010, 02:35:06 PM »
Hi Yanto.Chiang,

Can you make the last link in your posting non-clickable, putting hxtp://etc. for people that visit without protection could get infected....
Re: http://scanner.novirusthanks.org/file/f36a62c9f20a9b327cbf4c40c8bda205/aW50cm9kdWN0aW9uX190ZW1wbGVob3VzZV9w/    does not give a detection...
Linkscanner dtects: Congratulations!
 LinkScanner® Online did not find any exploits.
 Scanned: Thursday, May 20, 2010
Scanning with DrWeb url checker:
Checking: htxp://www.proni.gov.uk/introduction__templehouse_papers_mic597.pdf
Engine version: 5.0.2.3300
Total virus-finding records: 1339409
File size: 220.39 KB
File MD5: f36a62c9f20a9b327cbf4c40c8bda205

hxtp://www.proni.gov.uk/introduction__templehouse_papers_mic597.pdf - archive PDF
hxtp://www.proni.gov.uk/introduction__templehouse_papers_mic597.pdf - Ok
 
polonus

 
« Last Edit: May 20, 2010, 03:35:48 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: JS:Pdfka-gen problem
« Reply #6 on: May 20, 2010, 02:46:31 PM »
Quote
Can you make the last link in your posting non-clickable, putting hxtp://etc. for people that visit without protection could get infected....
You mean the same link you also posted clickable......Polonus... ;D.......

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89053
  • No support PMs thanks
Re: JS:Pdfka-gen problem
« Reply #7 on: May 20, 2010, 03:20:14 PM »
Downloaded and scanned hxxp://wxw.proni.gov.uk/introduction__templehouse_papers_mic597.pdf using avast right click scan and no alert.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: JS:Pdfka-gen problem
« Reply #8 on: May 20, 2010, 03:35:18 PM »
Hi Pondus,

Yes, as it now appears clean, but I corrected...

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!