Skip to main content
willyb29632108
Participant
June 10, 2016
Question

Malware disguised as FlashPlayer

  • June 10, 2016
  • 3 replies
  • 4668 views

Last week I foolishly installed malware disguised as flash player on my mac. Today I had a pop up telling I should update the Flash Player; it was not from an adobe url so I suspect. But this time I captured the url instead of clicking on it.

Video Player Setup

If this is a valid Adobe url it would be nice if you used one; if not GO GET 'EM

thanks

Bill BIesele

This topic has been closed for replies.

3 replies

nomdeplume_
Participant
September 25, 2018

Today I received a popup to update Flash, so I downloaded and installed what I thought was a genuine update.

Now I know I installed malware, and am not sure what to do to erase it? What version of Malware is it?

jeromiec83223024
Inspiring
September 28, 2018

See my post above from June 16, 2016.  It still applies.

I provided a little more detail to another Mac user yesterday in this vein. 

It's at the end of the thread, here: VIRUS with new Adobe Flash installer

jeromiec83223024
Inspiring
June 13, 2016

Thanks for the report.  I've escalated this to our fraud team.

Participant
June 14, 2016

Hi, I also have malware posing as flash player on  my brand new laptop. iv reset my laptop a few times and still it comes back . can you help?

jeromiec83223024
Inspiring
June 14, 2016

It sounds like there's a good chance that you're reinfecting your computer through some action that you keep repeating.  It's possible that you've backed up infected files, are installing software that has an infected payload, using an infected USB memory stick, or there's another infected machine on your network that keeps infecting your machine before it can get patched completely.

If it was my personal machine on my home network, I would:

  • Back up all of the files that are important to me.
  • Destroy any USB memory sticks that I've been using:
    • Malware can infect and persist on memory sticks, and is a common vector for malware infection.
      A cloud storage service like Google Drive or Dropbox is probably a better choice.
  • Wipe the computer
  • If the computer is connected to the network via Ethernet, disconnect it
  • Reinstall a current operating system (Win7 or higher, and ideally, Win10) from pristine sources
  • Disconnect everything else from my cable/DSL modem and plug the computer directly into it via ethernet
  • Download and apply all of the available patches for the operating system
  • Install and update a reputable Anti-Virus and Anti-Malware package.
  • Install of the software from pristine sources (downloaded directly from the software developer, *not* from backups)
  • Restore the critical data files I need from backups (pictures, music, documents, etc)
  • Scan the disk with the virus scanner to make sure I'm not restoring obviously infected files
  • Disconnect the computer from the network
  • Plug your wireless router back in if you have one, connect to it, and make sure that the latest firmware updates have been applied to it.  There are malware packages that target commodity wireless routers and insert fake upgrade notifications on web pages.  Typically restarting the router is enough to temporarily clear the infection, but it will probably keep coming back until you apply current firmware.
  • Install an Anti-Virus and Anti-Malware package on your other computers, and perform full scans there.  If you find malware, repeat the backup/wipe/reinstall process with each of those machines as well.

So, not a lot of fun, but just going through everything methodically, and then ensuring that you keep your software fully patched at all times (everything should have automatic updates enabled, routers should get checked regularly for available updates, etc) is the best way to keep malware off your system.

Depending on your current browser of choice, you might think about switching to one with a better reputation for resilience against malware.

Rajashree Bhattacharya
Legend
June 11, 2016

Noving to flash player.

Regards

Rajashree