Aces High Bulletin Board

General Forums => Hardware and Software => Topic started by: Skuzzy on February 22, 2014, 06:29:24 AM

Title: Latest Adobe Flash Updater has a surprise
Post by: Skuzzy on February 22, 2014, 06:29:24 AM
If you allow Adobe to update your flash player in your browser, they WILL install McAfee!  Adobe has removed the option to opt out of the installation.

The only way around it is to use the full Flash installer.

For Internet Exploder, use this (http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player_ax.exe)
For all other browsers, use this (http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player.exe)

The reason I am bringing this up is there is a virus, active on the Internet, exploiting a security hole in the current Flash player.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: SilverZ06 on February 22, 2014, 07:28:11 AM
Thanks Skuzzy!
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Bizman on February 22, 2014, 08:27:18 AM
Just a minute ago I installed Flash Player for both IE7 and Firefox 27 on a freshly factory reset computer (that's why it was still IE7). IE was the first to go and I went directly to the Finnish locale site. It offered the option to install Chrome, which I unticked. In the meantime I downloaded Firefox without transferring settings from IE. This time I thought I'd check if the localization would make any difference, went to adobe.com instead of .fi and chose to stay on the US site despite the question of my locale. This time the installation offered McAfee, but again the option was able to uncheck. For security reasons I checked the Programs and Features, no McAfee there.

Hopefully your find was only a temporary glitch on the Adobe site, Skuzzy.  :salute
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: MrRiplEy[H] on February 22, 2014, 08:44:38 AM
Would be kind of odd if they would push McAfee installs on computers that potentially already have antiviruses. That could lead into serious conflicts.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Bizman on February 22, 2014, 01:16:45 PM
An update: One of our computers just did the automatic Flash update at startup. No extras as far as I could find.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: HornetUK on February 22, 2014, 01:26:27 PM
Does this apply in the UK I do my system maintance every weekend with filehippo and saw no sign of this?
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: BluBerry on February 22, 2014, 02:03:21 PM
If you allow Adobe to update your flash player in your browser, they WILL install McAfee!  Adobe has removed the option to opt out of the installation.

The only way around it is to use the full Flash installer.

For Internet Exploder, use this (http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player_ax.exe)
For all other browsers, use this (http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player.exe)

The reason I am bringing this up is there is a virus, active on the Internet, exploiting a security hole in the current Flash player.


Thanks for the heads up man, appreciated.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Max on February 22, 2014, 02:26:59 PM
Skuzzy will this work for all future Adobe installations as well? Lord knows they update at least once a month.

if so, how about a sticky?
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Denniss on February 22, 2014, 03:52:01 PM
http://www.adobe.com/products/flashplayer/distribution3.html

Links for all supported OS, also links to the ESR Flash version without feature experiments.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Skuzzy on February 24, 2014, 06:29:12 AM
Maybe they are only pushing this in U.S. installations, but the Internet is alive and screaming about this problem.  I know I almost got burned by it.  I saw the McAfee installation progress indicator and terminated it as fast as I could.

No warning, no check boxes to avoid it.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Denniss on February 24, 2014, 10:19:09 AM
So the best option would be to got to the flash player control panel and set update method to "notify only", if notified you now know where to get the clean update from.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: eagl on February 24, 2014, 10:25:09 AM
That's weird skuzzy.  I've updated 4 computers with the latest adobe flash in the last 2 weeks and not one of them forced the mcafee antivirus installation.  I wonder what's going on.  Maybe if it detects no active antivirus it forces it?  I have Microsoft security essentials on all of the computers, so if you're not using that then maybe that's the difference?
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Skuzzy on February 24, 2014, 10:40:03 AM
That's weird skuzzy.  I've updated 4 computers with the latest adobe flash in the last 2 weeks and not one of them forced the mcafee antivirus installation.  I wonder what's going on.  Maybe if it detects no active antivirus it forces it?  I have Microsoft security essentials on all of the computers, so if you're not using that then maybe that's the difference?


That could be possible.  Maybe Adobe pulled that update after the backlash.  The net was buzzing with complaints about it.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: McShark on February 27, 2014, 07:42:54 AM
If you allow Adobe to update your flash player in your browser, they WILL install McAfee!  Adobe has removed the option to opt out of the installation.

The only way around it is to use the full Flash installer.

For Internet Exploder, use this (http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player_ax.exe)
For all other browsers, use this (http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player.exe)

The reason I am bringing this up is there is a virus, active on the Internet, exploiting a security hole in the current Flash player.

Use Modzilla on my game rig .... AND NO FLASH at all ! :aok
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: VonMessa on February 27, 2014, 07:45:23 AM
Tanks, Skuzzy  :aok
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: McShark on March 13, 2014, 05:24:31 AM
That could be possible.  Maybe Adobe pulled that update after the backlash.  The net was buzzing with complaints about it.

Downloaded Adobe Reader yesterday. Also came along with McAffee.

No opt to refuse it. Just plugs it in.  :furious :furious :furious
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Skuzzy on March 13, 2014, 07:12:13 AM
If all you wanted was a PDF viewer, you should use Foxit PDF Reader (http://www.foxitsoftware.com/Secure_PDF_Reader/).  It is more secure, uses less resources, faster, and so on.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: McShark on March 13, 2014, 08:03:56 AM
If all you wanted was a PDF viewer, you should use Foxit PDF Reader (http://www.foxitsoftware.com/Secure_PDF_Reader/).  It is more secure, uses less resources, faster, and so on.

Will try it, thx Skuzzy!
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Skuzzy on March 13, 2014, 08:58:09 AM
By the way, if you allowed McAfee to get installed on your computer.  The only way to undo the damage the installation of McAfee does to your computer is to wipe out the operating system and install a fresh copy.

At least Norton has a tool, on their WEB site, for undoing the damage it does when it is installed.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: McShark on March 13, 2014, 10:38:55 AM
By the way, if you allowed McAfee to get installed on your computer.  The only way to undo the damage the installation of McAfee does to your computer is to wipe out the operating system and install a fresh copy.

At least Norton has a tool, on their WEB site, for undoing the damage it does when it is installed.

All that was visible was an exe file to start installation. That one I have erased and manually looked for anything that looks like McAffee.

Not enough?
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Skuzzy on March 13, 2014, 10:44:46 AM
As long as you aborted the installation before it finished, you are fine.  Once installed, McAfee replaces system files with its own stuff.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: MrRiplEy[H] on March 13, 2014, 12:03:58 PM
Downloaded Adobe Reader yesterday. Also came along with McAffee.

No opt to refuse it. Just plugs it in.  :furious :furious :furious

The 'opt' to refuse it is during the intial selection before you start even downloading the package. Once you've downloaded the version with mcafee it won't ask you anything.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Rich46yo on March 13, 2014, 03:24:15 PM
Flash is the most problematic piece of code Ive ever put on a computer.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Mar on March 15, 2014, 12:36:38 PM
Thank goodness I never set automatically install updates. Thanks for the heads up Skuzzy, I'm not taking any chances.

The 'opt' to refuse it is during the intial selection before you start even downloading the package. Once you've downloaded the version with mcafee it won't ask you anything.

This. Unselect Mcfee at the website and you won't get it.
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Denniss on March 15, 2014, 12:53:53 PM
Post are somewhat confusing here. I never had some Mcafee stuff pop up when I had a Flash or Reader autoupdate but I know you have to deselect this BS upon manual download from their website at the usual Flash/Reader download option (not the distribution link).
Title: Re: Latest Adobe Flash Updater has a surprise
Post by: Bizman on March 15, 2014, 01:03:02 PM
As long as you aborted the installation before it finished, you are fine.  Once installed, McAfee replaces system files with its own stuff.
I just coincidentally looked for hidden devices in the Device Manager. To my surprise there were a couple of McAfee thingies! After removing them they didn't reappear after the next boot but I don't remember seeing anything by McAfee installed since the last time I took a look into the Device Manager which wasn't too many months ago. Could it be that even though I was able to untick McAfee, the Flash Player update still installed something of it? If so, some rules have been violated!