Why does Adobe Reader need so many updates?

I moved to Sumatra PDF many moons ago and have never looked back. It is like the Google Chrome of PDF viewers.

Yep. Sumatra is great for snappy viewing. But do not print! What it does is convert whole pages in bitmaps and chokes the memory and the network.

I would strong recommend PDF-Xchange. I was a heavy Foxit user, but then it became bloated too and Sumatra lacks some features like highlighting and commenting.

Print?

I've no problems with its looks, but is there a way to not start with "fit page width" and therefore a bigger window? I always have to resize and change the modus which is unpleasant. (on Windows) Thanks in advance!

Google chrome viewer looks promising, but also crashes for me on some PDFs.

Obviously I can't speak to your situation specifically, but it is very common these days for people to have malware that was installed through an exploit that they've never detected - indeed it can be very difficult to detect a lot of modern malware without in memory analysis and skilled forensics. Signature tools and things like malware bytes are extremely hit and miss. OS X and linux are even worse off (at least with standard configurations) once something has done a remote code execution and gotten a privesc.

Poll a few people who do security work and ask them if they have acrobat or flash or the jdk installed at all, or running on pages by default. You'll hear about the same thing.

Even 5 years ago was a very different world as far as threats go.

I'd strongly suggest using an alternate PDF reader (apple, google, evince, sumatra) and using flashblock.

I can't speak to exploits, but flash cookies and their application feel so unethical to me that I'd personally count them as owning unsophisticated users. http://www.macromedia.com/support/documentation/en/flashplay...

An honest question - to you or anyone who basically feels the same way:

What methods do you use to determine if you're running hostile code? How often do you look? Do you check from another OS? Keep hashes of system files?

Let me expand on the theory that most malware hosts have absolutely no idea (and not just the dumb ones):

Once installed many threats actively evade AV, personal firewalls, and code signing requirements. Are you booting a livecd and checking hashes of the boot block and boot chain against previously saved values? What about the hash of your EPROMS?

I understand that sounds very paranoid - but advanced toolkits that attack the BIOS or boot loader are widely available. Are they only for juicy targets? TDL4 - an advanced threat that starts in the boot block and has used private 0-days - is engaged in the super spy thriller business of clickfraud. $10k will buy you a kit from Israel that inserts similar code into the system BIOS and is designed for non-techies to deploy.

Expecting to see increased resource usage? CPU, RAM, network speed are all far outstripping most actual application needs and the resources needed for a keylogger, afinity rewriter, ad inserter or similar are vanishingly small.

Expecting a signature hit in some security software? Authors check their own code frequently - when signatures get deployed that catch them they simply recompile and tweak until they're undetected again.

Expecting pop up ads, AV scareware, spamming activity or fraud alerts on your credit card? Some threats are like that, yes, but shrinking. Just as or more likely are threats that manipulate search results, add affiliate tags to big ticket items, slip paid SEO links into blogs, steal your banking credentials but decide you're too poor or in an inconvenient county or steal company IP/plans/etc for chinese, russian, french, korean etc. competitors - the impact of which may take years or never be identified.

Expecting unknown, suspicious or hidden processes? Hiding in plain sight is a common and effective tactic. Can you tell the difference between a game installed codec, a useful codec with legal clickstream collections installed by a torrent downloader and a codec that was installed by exploit and rewrites your network traffic? Looking at a process list how many are you positive were running last month? Can you tell if skype is loading a dll or so that it wasn't before?

Think you're an unlikely target? Odds are that's true. However, automated tools can be deployed against thousands of targets and if only one or two have something really juicy it was a worthwhile effort. Proprietary IP of almost ever type has some value to someone be it term sheets, source code, M&A data, business process, sales leads, P&L data etc. Could your SO think you're cheating? Smartphone malware sold for 3000 yaun (~$450) supposedly marketed to houswives was found running on 150,000 chinese phones - it real time tracks your location, records audio, video and pictures regularly or on demand, steals credentials and all email/im/sms traffic. If you're of no interest it's possible your next door neighbor is, or his girlfriend, or someone who gets coffee where you do.

20 years ago malware was made by hobbyists. 10 years ago malware was made by small independent businessmen and specialty concerns. 5 years ago malware was made by organized crime, corporate espionage and intelligence agencies. Today malware is made by private organizations with hundreds of employees and traditional office space, teams supporting major M&A lawyers, the FBI to execute wiretapping warrants, defense contractors, ad networks, energy companies, virtual currency resellers, intelligence services conducting broad surveillance on foreign populations and security services conducting broad surveillance on their own citizenry.

One reason you don't hear a lot about it is there are very few practical solutions out there to be implemented. Microsoft, Google, Apple, Oracle and Intel are all making inroads to various degrees but practically it is decidely a losing game so far. For the time being their profit margins depend on people not getting scared away. Law enforcement and Intelligence services that might have warned against such threats in another era are by in large too busy exploiting them.

I fully understand that this all sounds very tinfoil hat and extremist. All the examples given are real and happening to very real people every day. The threat model has radically changed - it may just take another 3-5 years for everyone to understand the new rules.

be aware that pretty much anything doing a remote code execution follows it up with local privilege escalation exploits - which are rather common and frequently don't get top priority for fixes.

You say that as if it's too little... but really, one guy just on the installer?

One is the optimal number of people to put on the task of fixing a bug of this magnitude.

Download the customisation wizard, build a transform which installs it with the EULA accepted and no desktop icon.

Out of interest, what Windows version are you running? Adobe hasn't asked me to reboot in quite a long while.

This accurately describes the way my university network behaved.

Have you tried Ctrl+S or selecting 'Save page as...' from the wrench menu? I'm running the dev build so I don't know whats in beta or stable, but I get a nice little dialog box to save the pdf.

What? Like Ctrl-S?

I actually view Chrome's PDF plugin as a complete abomination (at least on the Mac), and go out of my way to nuke it. It's slow, and there is _no_ easy way to open the PDF displayed in a PDF handling app (i.e. Preview) without resorting to copy and pasting the URL into wget.

The fact that millions of people are using their software and the fact that they have a real problem to solve (to silence the haters) does not sound so depressing to me. On the contrary many developers would be happy to have such a problem

I think Chrome is still the winner here. I don't even notice when it upgrades itself.