Alert: Fake Adobe Flash

14 years ago

Just a heads up here, this is showing up on several of the forums so wanted to put out an alert here also.

This affects firefox as well as IE.

Fake Adobe Flash Player Monitors Your Google Searches

this is a link to one of the treads about it over on BBR

new piece of malware

that link includes pictures of the fake as well as a real flash update so you can see the difference.

another thread about it at BBR

Click Fraud Malware Hides as Firefox Extension

I immediately checked my firefox to see if this was showing up in my extensions list I suggest those using firefox do the same. Note that this does affect IE as well.

Comments (8)

maybee_gw
14 years ago
Will a Malwarebytes scan detect this if I am using IE8?
sapphires
14 years ago
Ravencajun,
How do I check my Firefox to see if it is showing up in my extensions list? Thanks. What should I see real vs fake? Thanks.
Sapphires
Related Discussions
My netbook got hit with a virus
Q
Comments (16)
Karla, I did the same thing. One of the screens which popped up looked just like AVG, which is my AV. It was running a scan but there were smaller windows which looked like Windows and said,'security alert! your computer has a virus, you must update your antivirus. It had the colors of a Windows warning with the red X and blue background. The AV scan was zipping along with these alerts popping up. I was so confused, luckily I didn't react immediately (which is what I tend to do), I sat and looked at the windows and realized the scan (which looked exactly like AVG) was not AVG. It was missing the 'G'. The top of the screen just said AV. When I saw that, I knew the other boxes weren't Windows. I couldn't X anything or stop the scan. I tried to open AVG but it wouldn't open. I tried Malwarebytes, no luck. I then tried to shut down the computer and the Start button wouldn't work. More pop-ups all over the place. I manually shut the computer off. When I restarted, I did the same as Karla. I clicked on Malwarebytes immediatelly before the other processes started. It instantly grabbed 3 items before it scanned (thought that was odd). After the scan it showed 7 items: Trojan horse Fake AV.CDC Virus identified Exploit PDF Trojan.Fraudepack AV Suite Rogue.AVSecurity Suite Temp Files IE5 Rogue AV Security Suite. I don't know how to show the log. I might reinstall Windows and be done with this. It was very upsetting. My netbook seems to work normally but the proxy settings were changed and it has frozen a few times. Jane
...See More
Java updates
Q
Comments (12)
javara is a very legit and safe program we have used and recommended it for years on the help forums. the old ones can be removed manually but using javara just makes it easy and gets some that you may miss manually. any versions you show other than the latest version can be removed. Java has recently added a feature that is supposed to remove the old version it is replacing but they never put out anything that would remove the versions prior to that so it is not surprising to see some very old versions still listed on older pcs. How I would proceed, do the update from the java icon on the pc, that should provide you with 7-7, then run javara and let it remove all other versions it finds.
...See More
Adobe type programs to use
Q
Comments (1)
you will likely need flash and shockwave when visiting some sites that have video and animations and stuff like that. You can get flash and shockwave from their website. It is always best to get them directly from their website so you know you are getting the real thing and not a fake one and there are some out there. Install Adobe Flash Player Install Adobe Shockwave Player
...See More
What is Adobe Plusplus?
Q
Comments (7)
RC, one of your links said to look for these...... "install_flash_player.exe" and "install_flash.exe" I did a search on my C drive for both and found neither. My FF extensions does show this as the latest entry: "Adobe DLM (powered by GetPlus(R)) 1,6,2,44 A GetPlusR download-,upload-And Installation Manager is a sophistocated tool for an efficient distribution of digital goods." My Plugins show this for the latest entry: "getPlusPlus for Adobe 16244 1.6.2.44" Now I recall yesterday morning, as I was working in Excel, suddenly my mouse was acting up...would highlight when I was trying to type, wouldn't switch from caps and lower case, etc. I rebooted and all was fine...except I was prompted to download the newest update for Firefox. I didn't do it at that time. Last night I decided I'd do "check for updates" for FF. It said there was one so I said to download it. Just afterward, the Adobe Flash prompt popped up so I thought it was connected to the FF update. However, I did not allow access to the internet for the Adobe PlusPlus request via Zone Alarm. My daily AVG didn't catch anything this morning (and I see from Virus Total's list that it might not). I ran Malwarebytes yesterday after the computer acted funny and it was negative. Is there an online scan for Firefox browsers? Thank you. Pam Am I sunk?
...See More
ravencajun Zone 8b TX
Original Author
14 years ago
go to your tools then click on add ons there click on extensions and make sure it is not showing there you do not want it,extensionÂs name and version number is "Adobe Flash Player 0.2â³.. You can also check the plugins tab for this item you do not want it there either. If you show it in your firefox extensions as shown in that first link I gave which shows the actual pictures of what you will see then you do have the infection. (the links show pictures of the add on and of the flash download)

as you can see on this virus total submission of the fake file not all the security programs are catching this yet here are the ones tested and the ones that did catch it are shown
File flash.exe scan result

since bit defender is catching it running their free online scan is a good idea if you suspect you have it. Malwarebytes may now catch it also I know it has been added to more definitions since the time of that virus total scan, make sure all your definitions are fully updated.
Free Online Virus Scan - BitDefender Online Scanner
minnie_tx
14 years ago
Raven
I LIKED WHAT YOU SAID ABOUT Bit defender and tried it I liked it but had to stop the scan after 1/2 an hour since I had to go out. Does that hurt anything? I plan to scan it tonight
Thanks or any info
ravencajun Zone 8b TX
Original Author
14 years ago
no just go ahead and do it again I prefer to let them run at night so I am not interfering with the progress, it does take a while for those scans to run.
minnie_tx
14 years ago
Raven I'm confused I did the scan it took almost 3 hours no problem with that but I don't think I did something right
when it Ws finished and as it was scanning it said 1 virus found Trojan script45873 html Gmect.a and a note your computer is still infected
Then the next screen gave me the statistics of the scan so many files scanned etc. then the last sreen saidResults No Virus found 4 threats and 4 threats eliminated.

I notice a box on the opening start scan screen that I didn't check and maybe I should have.

What is going on as you see I'm confused Any help appreciated
ravencajun Zone 8b TX
Original Author
14 years ago
it sounds like you may have seen it as the scan found the items then at the end it did clean those infections from your system and eliminated them. To me it sounds like it did what it was supposed to do, I would go ahead and update malwarebytes and run a full scan with it to see if it finds anything in addition, another very good online scan to use is
ESET's Online Antivirus Scan
minnie_tx
14 years ago
Thanks Raven I did a quick scan with Maelware (spelling) and it didn't find any. I';; look at the newest one you mentioned too In a differet thread I'll list what acan stuff I have on my computer and maybe you can tell me if I have too many
TIA (Maybe not today)

Alert: Fake Adobe Flash

Comments (8)

maybee_gw

sapphires

Related Discussions

ravencajun Zone 8b TX
Original Author

minnie_tx

ravencajun Zone 8b TX
Original Author

minnie_tx

ravencajun Zone 8b TX
Original Author

minnie_tx

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

Alert: Fake Adobe Flash

Comments (8)

maybee_gw

sapphires

Related Discussions

ravencajun Zone 8b TXOriginal Author

minnie_tx

ravencajun Zone 8b TXOriginal Author

minnie_tx

ravencajun Zone 8b TXOriginal Author

minnie_tx

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

ravencajun Zone 8b TX
Original Author

ravencajun Zone 8b TX
Original Author

ravencajun Zone 8b TX
Original Author