A

Anonymous

Question

Adobe Flash Player Update

Forum|Forum|9 years ago
September 1, 2016
8 replies
17574 views

I repeatedly get a web page popping up in IE that says "Adobe Flash Player - Your Flash Player may be out of date" which triggers an IE pop up asking what I want to do with FlashPlayer.hta.

The website is ohcoyinfotraxsys.org

Is this really from Adobe and legitimate?

Download install

This topic has been closed for replies.

M

michealg48373061

New Participant

and a second site pop-up today

_maria_

Community Manager

Hi,

Definitely a fake, as denoted by the non-adobe URL. I'll forward this to our fraud team for follow-up. In the future, please send it directly to phishing@adobe.com.

<edit>

Please note that fake alerts can be caused by Ads that have been infected with malicious code (so-called Malvertising) or even by malware/viruses itself. You help help protect your system by running up-to-date anti-virus, malware, etc software, performing regular virus/malware/etc scans, and blocking ads (if feasible, as some sites now require ads to be unblocked in order to view content).

--

Maria

_maria_

Community Manager

I'm going to lock this discussion topic - it's quite old with quite a few different people on it. Every time there's a new post, everyone receives an email notification.

For those of you that are getting these fake Flash Player update notifications, please take a screenshot of the entire page, including the address field with the full URL. Depending on the browser, you may need to click in the address field to display the entire URL. Send the URL and the screenshot to phishing@adobe.com. To take a screenshot, see https://forums.adobe.com/docs/DOC-7043#jive_content_id_How_do_I_attach_a_screenshot

Thank you.

--

Maria

M

michealg48373061

New Participant

Here is the pop-up that I am receiving

lorio81025281

Participating Frequently

it happened again this is the full url

https://upahbapkusa.org/2331612911713/f72ab95a7f960f53ecdb0df0cb65bee3/44b010a87edefd82cd3ee9dd58e1bba3.html

_maria_

Community Manager

Hi lorio81025281

Thank you for the URL. I've forwarded it to the fraud team for follow-up. Your post is currently being moderated and the URL may be removed by the moderator, considering it's pointing to a malicious installer. In the future, you can forward these URLs directly to phishing@adobe.com or private message them to me.

--

Maria

A

Anonymous

I get that same screen ALL the time, Your Flash Player May Be Out Of Date, but it ONLY happens when I'm logged into and checking my Yahoo Email. It only happens once and not every single day. I know it's garbage and never click on it, but I CAN'T figure out why it keeps happening?

lorio81025281

Participating Frequently

I get:

What do you want to do with Flashplayer.hta?

from: iuyeeonline-red.com

Open or Save.

I tried to add a screen shot but your system would not allow that kind of image.

I think this is fraud.

Lori

_maria_

Community Manager

Hi lorio81025281

Yes, this is a malicious Flash Player installer. If you have the entire URL to the page that has this installer, please private message it to me and I'll forward it to our fraud department. To send a private message, click on my user name link and the on the 'Message' button link.

--

Maria

lorio81025281

Participating Frequently

I have attached a screen shot but I do not have the entire URL at the top

of this image.

When it pops up again I will get it.

Lori

C

Crocodile631

New Participant

I got the same deal when I was reading this article: Apple is facing several big iPhone 7 problems | ZDNet

I clicked on this link in the article, and that's when I got the phony Flash Player offer: Rare reports of poor image quality on iPhone 7 Plus circulate, no root cause known

Here's the screenshot:

C

cdrez

New Participant

I also get this, the site is https://voohohelloweba.org/5441673362743/9ab4ce05fb1d12224e51c6043a6ca498.html

_maria_

Community Manager

Thank you. I have forwarded the URL to the fraud department.

D

drwho1031

New Participant

I have received the same message from this address: https://quibutonyluvgeraldine.org/1733338642150/f83e6d5a9f6905f9112ef7914491b91d.html

Screen shot...note the Adobe icons.

_maria_

Community Manager

Thank you. I have forwarded your post to our fraud department for follow-up.

_maria_

Community Manager

No, That is not legitimate. FlahsPlayer.hta is not a valid Flash Player installer file name.

Can you please confirm the website, and provide the entire website URL (e.g. http://...)? I tried going to the website you posted and got an error that the page cannot be displayed.

Can you please post a screenshot of the pop-up, and the website?

I recommend updating your virus/malware/adware/etc software and running a complete scan on your system.

A

Anonymous

I restricted the site in IE. This is the address that shows up in the Restricted Sites list:

https//*.ohcoyinfotraxsys.org

I can un-restrict the sight and see if the page pops up again, then send a screen shot if that will help you.

_maria_

Community Manager

unfortunately, I can't find information on that domain and when I try to navigate to it I get a server not found error.

It'd be great if you could provide a screenshot that I can forward to our fraud department for follow-up.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded