Possible Malware on Mac- Is Adobe Flash Player Install Manager a legitimate app?

Question

I have a macbook pro and I’m running OS 10.10. My browser is Safari 9.1.

Flash player NPAPI Plug-in version 21.0.0.242 is installed.

Flash player PPAPI Plug-in- not installed.

5/7/16- An identity protection service to which I subscribed sent a message saying my Adobe password was hacked. I changed the password.

5/15/16, 1 AM- While browsing using Safari a pop-up window appeared saying that my flash player needed to be updated. I (stupidly) clicked "OK". The window asked if I wanted it to install MacGuard, MacSecurity and another app. I clicked "no" to each, then "continue". It then asked for my administrator password to install Flash Player. Although I didn't type in the password and I closed the window it proceeded to install some files which alerted me that something was wrong. At the end of the installation my homepage was changed to Yahoo. I ran Malwarebytes. Malewarebytes identified some suspect files which I deleted. Then I restarted my computer.

I just noticed a file in my utilities folder named Adobe Flash Player Install Manager. It was created 5/9/2016 and was modified 5/12/2016. I don’t remember installing this app. Also, I have "Notify me to install updates" and I don't remember being notified. Is Adobe Flash Player Install Manage (located in the Utilities folder- see below) a legitimate app or should I delete it? When I impulsively tried to delete it a few minutes ago I was asked for my admin password. Before proceeding I am hoping to get some advice from forum members. Does it belong in the Utilities folder or should I delete it using my Admin password?

Thanks very much for any assistance.

_maria_ · Accepted Answer

Hi,Unfortunately, it does appear you received a fake Flash Player update notification as MacGuard and MacSecurity are not third-party products offered for installation with Flash Player, and the official Flash Player installer does not modify the browser's default home page or preferred search engine.The official Flash Player installer does have an app named Adobe Flash Player Install Manager.app in the Utilities directory, however, at this point, it's difficult, at best, to know if that file was created with the legitimate Flash Player installer or not.I recommend performing a clean uninstall. See the FAQ How to perform a "clean install" of Flash Player in Mac OS X for guidance.--Maria

maj3 · Answer

Thanks so much, Maria. The uninstall worked perfectly and it was very easy to follow the directions for a clean install. Thanks for your time and for the clarity of your communications.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded