What's Up with Flash Installer putting McAfee crap on my computer

[Stoney]

For the most part, at least it seems, you have to keep Flash updated for various reasons.  Why in 10 hells are they bundling some McAfee crap with it, when I don't even get the choice to install it or not?  I immediately uninstalled it, but knowing McAfee, they probably have some sort of presence left behind.

I really don't like that at all...

[MrRiplEy[H]]

For the most part, at least it seems, you have to keep Flash updated for various reasons.  Why in 10 hells are they bundling some McAfee crap with it, when I don't even get the choice to install it or not?  I immediately uninstalled it, but knowing McAfee, they probably have some sort of presence left behind.

I really don't like that at all...

It's called 'not reading what you accept while installing' syndrome.

[Getback]

It's called 'not reading what you accept while installing' syndrome.

Yeppers, been a victim of this.

[SilverZ06]

you had a choice. there is a check box that you needed to uncheck during the accept screens. you likely didn't read and just clicked accept as 90% of people probably do.

[Bino]

The Java update often includes a web browser toolbar crapplication, too.  Grrrrr.... 

[Stoney]

I didn't see a choice--guess I'll look more closely next time.

[Tigger29]

I didn't see a choice--guess I'll look more closely next time.

Well they try to trick you.  One of the options will be like "I ACCEPT THE LICENSE AGREEMENT and wish to install the McAfee Suite" and the other option will be "I do NOT wish to install the McAfee Suite" and then it makes you accept the license agreement on the next page.

A way to test this is to highlight the "I DO NOT WISH TO ACCEPT" button and see if the "NEXT" button is still clickable.  If so then that means that they are trying to sneak something along with the normal install.

**EDIT:  After looking into this it looks like you have to uncheck the "McAfee" option before downloading the installer for Flash.  What I mentioned above is a common trick a lot of companies try to use but what Flash is doing is almost as bad.. at least it's easier to see.  I have circled that option in purple to make it blatantly obvious in the screenshot below:

[Stoney]

I didn't get this menu.  I guess my flash player is set for auto-download, because I got a little pop-up in the system tray that prompted me to install the update.  Regardless, I'll make sure I don't have that box checked next time.

Thanks guys...

[Skuzzy]

Never, ever, Ever, EVER allow anything to auto-download!!  That is an invitation to a virus/malware/worm.

[Stoney]

Never, ever, Ever, EVER allow anything to auto-download!!  That is an invitation to a virus/malware/worm.

So, for things like Google update, Windows update, etc. you'd recommend I just manually check for updates periodically?

[Skuzzy]

So, for things like Google update, Windows update, etc. you'd recommend I just manually check for updates periodically?

Absolutely.  Pay attention to those updates.  Microsoft and Google, both, like to sneak things into your system.  That is not paranoia, just good computer security practices.

A side story.  Recently two physicists from MIT approached Google about getting funding for a new quantum computer they developed.  The very nature of which prevents data from being moved from the computer without it getting corrupted.  The ultimate security for any computer.  Google turned them down, "Our business plan calls for us to know everything about everyone and this computer would defeat that business plan."

[MutleyBR]

For the most part, at least it seems, you have to keep Flash updated for various reasons.  Why in 10 hells are they bundling some McAfee crap with it, when I don't even get the choice to install it or not?  I immediately uninstalled it, but knowing McAfee, they probably have some sort of presence left behind.

I really don't like that at all...

You were lucky!

Recently, the flash download link was hijacked by a trojan downloader. Check this page:

http://www.threatexpert.com/report.aspx?md5=d9788b4434e3dc03d01462fcbeda9cce

If that had been the case you would be in real trouble.

Just do as Skuzzy says: "Never, ever, Ever, EVER allow anything to auto-download!!  That is an invitation to a virus/malware/worm."

Take care all and check your 6!(specially in the Internet...) 

Mutley

[Stoney]

You were lucky!

Recently, the flash download link was hijacked by a trojan downloader. Check this page:

http://www.threatexpert.com/report.aspx?md5=d9788b4434e3dc03d01462fcbeda9cce

If that had been the case you would be in real trouble.

Just do as Skuzzy says: "Never, ever, Ever, EVER allow anything to auto-download!!  That is an invitation to a virus/malware/worm."

Take care all and check your 6!(specially in the Internet...) 

Mutley

Any way to check and see if that was what I downloaded?

[Bino]

Any way to check and see if [the trojan horse] was what I downloaded?

Using a good anti-virus program with an updated virus signature file is probably easiest.

[MutleyBR]

Any way to check and see if that was what I downloaded?

Yes, Stoney.

You can do as Bino said, scan using a good, updated, anti-virus program, or go to to the previously mentioned site:

http://www.threatexpert.com/report.aspx?md5=d9788b4434e3dc03d01462fcbeda9cce

There is a table there, called "File System Modifications".

In the left hand column, there are some file names.

For example: %Windir%\brada.dll

%Windir% stands for your Windows folder, for ex. C:\Windows

So, the filenames to look for, will in the C:\Windows folder.

Open Windows Explorer, navigate to C:\Windows folder and check if any of the mentioned files exist.

auto.msi , aviso.aas, bcef.dll, etc

If they exist, there is an infection.


Mutley