Infected by Exploit:Win32/Pdfjsc.AFU? – Malware Removal Guide

Does your antivirus program pick up a threat called Exploit:Win32/Pdfjsc.AFU on the PC? Are you afraid of the threat but cannot get rid of it? Sometimes, if you do not take effective measures to protect your PC from this type of threat, many serious problems may occur. Whenever you visit websites or play on-line games, some malicious software may be installed on your computer randomly without permission. Then your computer may be further damaged. Thus, please find effective methods to get rid of the threat as soon as you find it.

What is Exploit:Win32/Pdfjsc.AFU?

Exploit:Win32/Pdfjsc.AFU is a malicious PDF file that exploits a vulnerability in Adobe Acrobat and Adobe Reader. Adobe Acrobat and Adobe Reader earlier than 8.2.1 and Adobe Acrobat and Adobe Reader earlier than 9.3.1 are vulnerable to this exploit. The vulnerabilities allow this malware to download and run arbitrary files. The PDF file contains a malicious JavaScript so that it is able to make use of the vulnerable computer to invade the machine when you visit a compromised webpage. It is dangerous because other cyber threats can be downloaded and installed on the compromised PC. It is also observed to widely spread via the Blackhole exploit pack. This malware is also detected by other security tools as Troj/PDFJs-ACY (Sophos), JS/ShellCode.A(Command), Exploit.PDF (Ikarus), EXP/Pidief.dqz.1.B (Avira), Exploit.PDF.3178 (Dr.Web), TROJ_PIDIEF.ENR (Trend Micro) and PDF:Exploit.PDF-JS.SU (BitDefender).

The malware may contact the following site: 94.250.250.144 and attempt to download arbitrary files and programs on the affected computer.

Impacts of Exploit:Win32/Pdfjsc.AFU on your computer:

The threat can put your computer system at high risk. The following symptoms or consequences may occur once your computer is attacked by it:

• Some dll/exe errors or runtime errors constantly pop up.

• You may frequently experience unauthorized adware installation.

• Some important system files can not found all of a sudden.

• Windows registry may be filled with corrupt and invalid entries.

• More and more malicious applications appear in the PC.

• The entire computer system will be at high risk and become unstable.

• Various alert messages may pop up on pc screen occasionally

• Your sensitive information may be revealed to others through the internet.

How to get rid of Exploit:Win32/Pdfjsc.AFU virus totally and safely?

As the above has stated, we know that it is important to remove the threat timely. Follow the manual removal instructions to deal with the threat step by step.

Solution 1. Re-install Adobe Acrobat and Adobe Reader manually

Step 1. Restart compute and keep pressing key F8 on keyboard before computer boots. Navigate to “Safe Mode with Networking” and hit Enter button.

Step 2. Fully scan system with a trusted antivirus program like Kapersky.

Step 3. Click Ctrl+Shift+Esc to open Windows Task Manager.

Step 4. Click on Process tab, locate the suspicious processes and click “End Process” button

Step 5. Open Control Panel, double click “Add or Remove Programs” ( click “Uninstall a Program” in Win7)

Step 6. Locate the certain program you need to uninstall and click “Remove” button (click “Uninstall” tab in Win7).

Step 7. Navigate to the default location of the related files or folders, delete all of them

Step 8. Click Start, select Run, type “regedit” and click OK to open registry editor. Then delete the associated registry entries in:

HKEY_CURRENT_USER\Software\

HKEY_LOCAL_MACHINE\Software\

Solution 2. Remove malicious files and check out hosts file.

Step 1. Navigate to open My Computer, and remove the following files:

%AllUsersProfile%

%AllUsersProfile%\Application Data\~r

%AllUsersProfile%\Application Data\~dll

Step 2.Open registry editor (click Start -> Run -> input “regedit” and click OK), locate the left-side pane

Step 3. Navigate to remove the malicious files:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ ”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′

Commonly, there is a HOSTS file in computer folder C:\Windows\System32\Drivers\etc\hosts, which has only one line code 127.0.0.1 localhost (127.0.0.1 localhost::1 in Win7/Vista). When Exploit:Win32/Pdfjsc.AFU virus appear, this hosts file will be reset to another codes. What you should do is to open the hosts file and its backup file in the form of notepad, and make sure the both files are corresponding all the time.

Solution 3. Remove Exploit:Win32/Pdfjsc.AFU automatically .

It is a cumbersome task to conduct a manual removal of Exploit:Win32/Pdfjsc.AFU. Any problems occur during the process can possibly lead to multiple dangerous system problems, including sharp deterioration of system performance, Blue Screen of Death pop-ups, driver update issues, constant browser no responding and unexpected further dangerous malware attack. The PC even stops working if some vital information is removed. To safely remove Exploit:Win32/Pdfjsc.AFU, you should enable a highly trusted Trojan removal tool on your computer. It is strongly recommended that you use a reliable malware removal program to fix the problem. A malware removal tool is designed to get rid of various malware programs and unwanted stubborn programs and files completely and quickly. With it, you can delete the Trojan as well as its leftovers for good.

Therefore, you should

Download and save a reputable malware removal tool on your PC.

Install and run it to scan your computer.

Select the infected files and delete it automatically with the tool.

Exit the removal tool and restart your PC.

Then your computer will become clean again. Remember to keep your antivirus program and other security tools updated to safeguard your PC against various new cyber threats.