Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: FlashPlayer-Update does not work

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Flash Player 10.x

This thread has been marked as locked.
OliverB FlashPlayer-Update does not work
Member 8th Jun, 2012 14:52
Ranking: 0
Posts: 3
User Since: 8th Jun, 2012
System Score: N/A
Location: DE
After downloading "Install Solution" for "Insecure" rated "Adobe Flash Player 10.x" on my system via Secunia PSI 2.0 the downloaded File "flashplayer_ax10.3.183.16.exe" gave me an install warning because of this file not having a digital signature. I ignored this Warning (because of the file beeing downloaded by a secure program) but the installation did not run and it did not give me an error message or anything else.
Scanning the file via "Virustotal" showed me, one result of 40 scanners, infection by "TROJ_GEN.R06B5E2" (found by TrendMicro-HouseCall, just this one scanner).
Is this a problem or just a malfunctional update?

Maurice Joyce RE: FlashPlayer-Update does not work
Handling Contributor 8th Jun, 2012 18:17
Score: 11738
Posts: 8,998
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I would attempt a full Flash clearout/update & see what happens from there:

UPDATING THE STANDALONE ADOBE FLASH PLAYER

1. Download & SAVE these to desktop.

IE & Other Browsers using the Trident Rendering Engine.

http://fpdownload.adobe.com/get/flashplayer/curren...

& then here, if U have any other type of browser that does not have Flash embedded.

http://fpdownload.adobe.com/get/flashplayer/curren...

2. The installer will appear on the desk top. THE IMPORTANT BIT - Before agreeing to install Flash check these programmes are completely shut down (use the Task Manager if necessary (CTRL+SHIFT+ESC) to COMPLETELY EXIT these processes if running)):
a. All Browsers.
b. Windows Messenger.
c. Incredimail.
d. All Adobe Products.
e. PSI - Unless using version 2 or version 3 BETA 3

3. The new install will then remove all old files during the update process.

4. Complete a PSI rescan & all should be in order.

Go to Start>Control Panel>click the Flash Player (32 Bit) icon>check the settings are to your requirements.

Update 14 17:13 08/06/2012


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
OliverB RE: FlashPlayer-Update does not work
Member 8th Jun, 2012 18:49
Score: 0
Posts: 3
User Since: 8th Jun 2012
System Score: N/A
Location: DE
Thank you for this really quick reply, but where did Secunias PSI get this "flashplayer_ax10.3.183.16.exe" from and why does TrendMicro-HouseCall
think of it beeing "TROJ_GEN.R06B5E2"?
Was this reply relevant?
+0
-0
Maurice Joyce RE: FlashPlayer-Update does not work
Handling Contributor 9th Jun, 2012 00:09
Score: 11738
Posts: 8,998
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I note the download solution from Secunia was not an SPS package therefore the link they gave U should have been direct from Adobe.

I have no idea why version 10 appeared or about the possible viral content.

If U want to investigate this further I would download & install HiJackThis from here:

http://www.trendmicro.co.uk/products/free-tools-an...

That will produce a log file for U to troubleshoot.

Please be careful how U use this tool

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Anthony Wells RE: FlashPlayer-Update does not work
Expert Contributor 9th Jun, 2012 20:42
Score: 2439
Posts: 3,332
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

Further to what Maurice has said , the chances are that the single detection of the Flash .exe file is a False Positive - but a digitally non-signed installer should be queried ; as the warning comes from Trend Micro you may wish to ask them to recheck their findings . On the same site as found in Maurice's link for HiJack This , you can find their support Forums :-

http://esupport.trendmicro.com/en-us/business/page...

They would be best placed to tell you how to submit a possible FP file to clear the matter , one way or another .

You do not say which security software you use nor whether you have submitted the file to them for analysis .

Have you re-run Virustotal since posting ??

Where is the detected instance of the insecure 10.x Flash Player found by the PSI ??

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
OliverB RE: FlashPlayer-Update does not work
Member 10th Jun, 2012 11:59
Score: 0
Posts: 3
User Since: 8th Jun 2012
System Score: N/A
Location: DE
Last edited on 10th Jun, 2012 12:00
I just send TrendMicro my question about the possible false positive.
But if, as Maurice told me, this update-file was downloaded from Adobes download server, the chance for a false positive seems rather high.
The virus-scanner on my system (GData Total Protection) as well as Malwarebytes AntiMalware did not argue about the file, while the scan via VirusTotal continues showing the virus found by TrendMicro.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability