-
1. Re: Adobe Flash Player Update
maria__Sep 1, 2016 7:41 AM (in response to bobr62817432)
No, That is not legitimate. FlahsPlayer.hta is not a valid Flash Player installer file name.
Can you please confirm the website, and provide the entire website URL (e.g. http://...)? I tried going to the website you posted and got an error that the page cannot be displayed.
Can you please post a screenshot of the pop-up, and the website?
I recommend updating your virus/malware/adware/etc software and running a complete scan on your system.
-
2. Re: Adobe Flash Player Update
bobr62817432 Sep 1, 2016 11:14 AM (in response to maria__)I restricted the site in IE. This is the address that shows up in the Restricted Sites list:
https//*.ohcoyinfotraxsys.org
I can un-restrict the sight and see if the page pops up again, then send a screen shot if that will help you.
-
3. Re: Adobe Flash Player Update
maria__Sep 1, 2016 12:48 PM (in response to bobr62817432)
unfortunately, I can't find information on that domain and when I try to navigate to it I get a server not found error.
It'd be great if you could provide a screenshot that I can forward to our fraud department for follow-up.
-
4. Re: Adobe Flash Player Update
bobr62817432 Sep 1, 2016 2:32 PM (in response to maria__)OK. I'll un-restrict the site and capture a screen shot the next time it appears.
-
5. Re: Adobe Flash Player Update
drwho1031 Sep 7, 2016 5:38 PM (in response to bobr62817432)I have received the same message from this address: https://quibutonyluvgeraldine.org/1733338642150/f83e6d5a9f6905f9112ef7914491b91d.html
Screen shot...note the Adobe icons.
-
6. Re: Adobe Flash Player Update
maria__Sep 8, 2016 8:37 AM (in response to drwho1031)
Thank you. I have forwarded your post to our fraud department for follow-up.
-
7. Re: Adobe Flash Player Update
bobr62817432 Sep 12, 2016 10:13 AM (in response to maria__)Just got this again. It is not truly a "pop-up". It literally replaces the web page I'm on. Seems to occur when I'm on Yahoo.
Hope this helps.
Bob
https://foopointeresante.org/9301111029799/a1e0275a028584d02574c25304ff46a5.html
https://foopointere
9799/a1e0275a028584d02574c25304ff46a5.html
-
8. Re: Adobe Flash Player Update
maria__Sep 12, 2016 12:26 PM (in response to bobr62817432)
Thank you for reporting. I have forwarded your post to the fraud department for follow-up. This isn't Adobe doing this. Adobe is in no way involved. If you haven't done so completely scan your system for viruses/malware/adware/etc.
How do you access the internet? Do you use a router? If so, which one (make/model)?
-
9. Re: Adobe Flash Player Update
bobr62817432 Sep 12, 2016 1:17 PM (in response to maria__)I access the Internet via cable modem using Time Warner Cable.
I do use a wireless router. It is a Linksys WRT 1900 ACS utilizing WPA2 encryption.
I also run Norton Internet Security and their Deep Scan did not reveal any issues, nor did Malware Bytes.
-
10. Re: Adobe Flash Player Update
maria__Sep 12, 2016 2:24 PM (in response to bobr62817432)
Linksys routers had an issue some time back where they were getting infected with a worm, but a Google search didn't return your particular model as being injected. This was a long-shot, since it was some time ago.
Essentially, the browser is being hijacked to a malicious site. This is something on your system, not Adobe related. The page lists the file name as FlashPlayer.hta. Searching for this returns an issue with pop-ups from a few years ago. It's possible it's related and the method since you indicate yours isn't a pop-up, but a browser redirect (hijack). Unfortunately, troubleshooting these sorts of issues on your computer is beyond the scope of these forums. It's also been my personal experience that some anti-virus/malware/etc programs find things while others don't. Malware Bytes is a solid program and usually catching many things. You may want to try something else like AdWCleaner, HitManPro, and/or any myriad of other programs available.
-
11. Re: Adobe Flash Player Update
bobr62817432 Sep 13, 2016 11:44 AM (in response to maria__)Thank you for your insights and advice.
If I turn up anything else on this, I'll post it.
-
12. Re: Adobe Flash Player Update
cdrez Sep 20, 2016 10:12 AM (in response to bobr62817432)I also get this, the site is https://voohohelloweba.org/5441673362743/9ab4ce05fb1d12224e51c6043a6ca498.html
-
13. Re: Adobe Flash Player Update
maria__Sep 20, 2016 11:09 AM (in response to cdrez)
Thank you. I have forwarded the URL to the fraud department.
-
14. Re: Adobe Flash Player Update
Crocodile631 Nov 3, 2016 10:22 AM (in response to bobr62817432)I got the same deal when I was reading this article: Apple is facing several big iPhone 7 problems | ZDNet
I clicked on this link in the article, and that's when I got the phony Flash Player offer: Rare reports of poor image quality on iPhone 7 Plus circulate, no root cause known
-
15. Re: Adobe Flash Player Update
kathyo66276702 Nov 26, 2016 10:37 PM (in response to maria__)I got the same thing today when I tried to open at article on att.net while using Microsoft Edge. Instead of the article, the page told me I had to update Adobe Flash. I downloaded it, but did not install it. I then ran Norton antivirus and Ccleaner, but it was not flagged as a virus or malware. I don't recall the site now, but the file is FlashPlayer.hta
-
16. Re: Adobe Flash Player Update
kathyo66276702 Nov 26, 2016 10:51 PM (in response to kathyo66276702)I decided to go to the Adobe site to make sure I have the most current version. It wants to know if I have foxfire or Opera / Chromium. I have Microsoft Edge open, so which do I pick? When I tried it on my Google browser, I got a message that I already have the most current. Thank you.
-
17. Re: Adobe Flash Player Update
maria__Nov 28, 2016 9:51 AM (in response to kathyo66276702)
Hi,
To see which version you have, go to Flash Player Help and click the 'check now' button. The widget will auto-detect the OS, browser, and Flash Player version installed (if any). If you use multiple browsers you'll want to repeat as different browsers use different plugin types (e.g. IE/Edge use Flash Player ActiveX Control, Firefox uses NPAPI plugin, Chrome/Opera and Chromium-based browsers use PPAPI plugin).--
Maria
-
18. Re: Adobe Flash Player Update
lorio81025281 Apr 10, 2017 9:22 AM (in response to bobr62817432)I get:
What do you want to do with Flashplayer.hta?
from: iuyeeonline-red.com
Open or Save.
I tried to add a screen shot but your system would not allow that kind of image.
I think this is fraud.
Lori
-
19. Re: Adobe Flash Player Update
maria__Apr 10, 2017 9:49 AM (in response to lorio81025281)
Yes, this is a malicious Flash Player installer. If you have the entire URL to the page that has this installer, please private message it to me and I'll forward it to our fraud department. To send a private message, click on my user name link and the on the 'Message' button link.
--
Maria
-
20. Re: Adobe Flash Player Update
lorio81025281 Apr 10, 2017 10:52 AM (in response to maria__)I have attached a screen shot but I do not have the entire URL at the top
of this image.
When it pops up again I will get it.
Lori
-
21. Re: Adobe Flash Player Update
lorio81025281 Apr 10, 2017 10:56 AM (in response to lorio81025281)How do I get rid of it?
I have ran CCleaner and Malwarebytes.
Lori
-
22. Re: Adobe Flash Player Update
maria__Apr 10, 2017 11:24 AM (in response to lorio81025281)
Hi,
There is no screenshot attached. If you're replying via email, the forums software blocks all email attachments. Please try to get the entire URL. From previous experience, the fraud team really does need this to follow-up properly and issue a cease and desist to take down the malicious installer.
Unfortunately, I can't provide information on how to stop this from happening as it could be any number of things, ranging from a malicious ad on a page to something more nefarious. If you perform an internet search for FlashPlayer.hta it'll return many search results, so it's really hard to give you a proper solution.
--
Maria
-
23. Re: Adobe Flash Player Update
lorio81025281 Apr 10, 2017 3:35 PM (in response to maria__)who it is from does not help??
from: iuyeeonline-red.com
-
-
25. Re: Adobe Flash Player Update
lorio81025281 Apr 10, 2017 3:49 PM (in response to maria__)Thank you.
If it pops up again I will capture the url.
-
26. Re: Adobe Flash Player Update
lorio81025281 Apr 11, 2017 11:01 AM (in response to bobr62817432)it happened again this is the full url
-
27. Re: Adobe Flash Player Update
lorio81025281 Apr 11, 2017 11:04 AM (in response to maria__)It happened again. This is the full url
-
28. Re: Adobe Flash Player Update
maria__Apr 11, 2017 11:22 AM (in response to lorio81025281)
Thank you for the URL. I've forwarded it to the fraud team for follow-up. Your post is currently being moderated and the URL may be removed by the moderator, considering it's pointing to a malicious installer. In the future, you can forward these URLs directly to phishing@adobe.com or private message them to me.--
Maria
-
29. Re: Adobe Flash Player Update
Limber Log Apr 16, 2017 7:03 PM (in response to maria__)I get that same screen ALL the time, Your Flash Player May Be Out Of Date, but it ONLY happens when I'm logged into and checking my Yahoo Email. It only happens once and not every single day. I know it's garbage and never click on it, but I CAN'T figure out why it keeps happening?
-
30. Re: Adobe Flash Player Update
lorio81025281 Apr 17, 2017 7:41 AM (in response to Limber Log)Yes. I believe it has to do with Yahoo email and IE. I went to Adobe to see if my flash player needed to be updated. There was a "test" button to see if it was working. Mine worked fine so I do not believe I need to be updated. I think I have some sort of spam/virus on my computer. I do not select it but it is annoying. I would like to know how to remove it. Ive tried ccleaner and Malwarebytes.
-
31. Re: Adobe Flash Player Update
maria__Apr 17, 2017 8:02 AM (in response to Limber Log)
Please post a screenshot of the update notification window, including the ENTIRE website address that is displaying the update notification.
Thank you.
-
33. Re: Adobe Flash Player Update
maria__Apr 17, 2017 12:03 PM (in response to lorio81025281)
Thank you, lorio81025281
is the update notification you're seeing similar to the ones in the screenshots posted to this discussion topic in posts 5, 7, & 14?
-
-
35. Re: Adobe Flash Player Update
lorio81025281 Apr 17, 2017 12:42 PM (in response to maria__)yes. like 14. each time it seems to be from a different website. I have not written them all down.
-
36. Re: Adobe Flash Player Update
maria__Apr 17, 2017 1:58 PM (in response to Limber Log)
Thanks for the screenshot and confirming. Do you have the complete URL for the site?
Thanks for confirming. I'll forward the URL to the fraud team.
Searching the internet for FlashPlayer.hta indicates this is a 'redirect virus' or a malicious browser extension. I found a few sites that claim to have fixes to remove this from your system, but I can't claim their efficacy, as such, am not posting links to the site. You can perform an internet search and find the same results.
A few things to begin with:
- Task Manager: look for FlashPlayer.hta process, if it's present terminate it.
- You may need to select to view processes for all users
- Control Panel > List of installed programs: check to see if there's an entry for FlashPlayer.hta or other suspiciously named software that you don't recall install installing (e.g. some search toolbar, etc).
- Browser plugins: same as above, look for a FlashPlayer.hta or other suspiciously named plugins that you don't recall installing
I did find references to FlashPlayer.hta on the MalwareBytes sites and their forums, so they are aware of this. If you have the latest definitions installed I suspect it would detect this on your system.
- Task Manager: look for FlashPlayer.hta process, if it's present terminate it.
-
37. Re: Adobe Flash Player Update
Charly1954 May 5, 2017 10:38 PM (in response to maria__)today I got the fake Adobe update, I immediately took a printscreen then used task manager to end the internet which closed the fake site and update popup. Heres the snapshot.
After opening a new tab for a site from a bing search I was redirected from that site to the one shown(agaiktexalyser.org), as you can see the left arrow is highlighted blue. Yesterday I also had a redirect so ran Malwarebytes, adwcleaner, avast browser cleanup, Hitman, tdskiller, rkill, and Zemana Antimalware. Nothing was found on any of these programs. If I have something its hiding real good.
-
38. Re: Adobe Flash Player Update
ridhijainMay 7, 2017 9:34 PM (in response to Charly1954)
Hi,
Thanks for reporting the issue. I will forward the url to the phishing team.
Thanks!
-