TrojanDropper:Win32/Pidrop.A is a detection for a malicious .PDF document that drops VBScripts that attempt to drop and execute other malware detected as TrojanDropper:Win32/Emold.C.

Exploit:JS/Pdfjsc.B is a detection for specially crafted PDF files that target software vulnerabilities in Adobe Acrobat and Adobe Reader.

Windows Defender detects and removes this threat.

This threat uses specially-crafted Shockwave Flash (.swf) files to exploit an Adobe vulnerability to download and run files on your PC, including malware.

It runs when you visit a malicious or hacked website and you have a vulnerable version of Adobe Flash Player.

The following versions of Adobe Flash Player are vulnerable:

• Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64
• Adobe AIR before 2.0.2.12610
• Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X

If you visit a webpage containing this threat and your PC has a vulnerable version of Flash installed, this threat can download and run other malware.

Find out ways that malware can get on your PC.

Exploit:Win32/Taro.H is a detection for an exploit affecting the word processing application Ichitaro by JustSystems of Japan.

Exploit:iPhoneOS/Pidief.A is the detection for specially-crafted PDF files that exploit a memory corruption vulnerability in the Preview PDF viewer for the iPhone operating system.

Exploit:Win32/Pidief.HW is a detection for specially-crafted PDF files that target a software vulnerability in Adobe Acrobat and Adobe Reader version 8 before 8.2.1 and version 9 before 9.3.1. The vulnerability exploited by this malware is referenced by the Common Vulnerabilities and Exposures (CVE) Identifier CVE-2010-0188.

 

Exploit:Win32/Pdfheap.A is the detection for a malicious Portable Document Format (PDF) file that attempts to exploit the vulnerability described in CVE-2009-1862.

 

Exploit:Win32/Pdfjsc.KG is the detection for a malicious Portable Document Format (PDF) file that exploits certain vulnerabilities in Adobe Acrobat and Reader to obfuscate and hide, and subsequently run, malicious JavaScript and shellcode. The shellcode is used to download other malware.

Exploit:Win32/CVE-2010-2572.A is the detection for specially-crafted Microsoft Powerpoint files that exploit a vulnerability addressed by Microsoft Security Bulletin MS10-088. This vulnerability may allow attackers to execute arbitrary code that can drop files, install programs or modify data without the user's knowledge or consent.

Windows Defender detects and removes this threat.

The threat is a generic detection for obfuscated JavaScript found on malicious or compromised web pages. It is used to redirect you to websites other than the one you intended to visit.

Find out ways that malware can get on your PC.  

Exploit:JS/Blacole.AT is a variant of JS/Blacole, JavaScript malware that consists of several exploits and is created by the "Blackhole" exploit kit. Exploit:JS/Blacole.AT is installed to compromised websites by an attacker. It attempts to exploit the following CVE vulnerabilities:

• CVE-2007-5659
• CVE-2009-0927
• CVE-2010-0886
• CVE-2010-1885
• CVE-2011-2110

Exploit:Win32/Pdfjsc.YX is a specially-crafted JavaScript, which exploits a vulnerability in the Java Runtime Environment, Adobe Acrobat, and Adobe Reader discussed in the following articles:

• CVE-2011-2110
• CVE-2010-0840
• CVE-2007-5659

TrojanDownloader:HTML/Agent.K is a detection for specifically formed IFRAME tags that point to remote Web sites containing malicious content. This content could include, for example, malicious JavaScript containing an exploit for a specific vulnerability, or malicious binaries.

Backdoor:Win32/IRCbot.BH is a generic detection for a backdoor trojan that connects to an IRC server to receive commands from an attacker. This trojan contains code that exploits vulnerable Windows computers that have not applied Security Bulletin MS08-067.