Adobe Flash Player

[LR827]

In Safari, I went into CreateSpace to make some changes in a text, and I got a link to "upgrade Adobe flash player" that would not go away. I had to click on it. Then it did not install properly and I deleted the .dmg. I went back into the CS website, in the Firefox browser, and made the changes in the text without any problem.

Now I feel, of course, like an idiot for downloading something I knew nothing about. Did I make a mistake? Does anyone know anything about this?

Thanks in advance

[Xairbusdriver]

How do you know it did not install properly?
Did you return to that page in Safari? Did you get the same message?
Do you have any Safari extensions for blocking Flash installed?

Are you experiencing any computer problems?

Once again, I've not heard of any malware that does any harm to a Mac. But you can easily install a free app from Sophos that will scan your drives for known malware. Do you have anything like that installed?

When you have a dialog that gives you no options except to install something, you should still be able to use "Force Quit..." To shut down the app. Did you try that?

[jchuzi]

Sounds like you might have downloaded some malware. To check Adobe Flash Player, open System Preferences>Flash Player and select Advanced. If the latest version is installed, it should say "Plug-in version 11.5.502.149 is installed". When FP updates are released, I do not get a notification from Safari. I usually see the the update at MacUpdate or Version Tracker and I usually install it by using the Check Now button (you'll see it in that Flash Player preferences window). Alternatively, I go directly to Adobe's website and download it from there.

Your experience sounds very suspicious. Hopefully, I'm just being paranoid.

[Xairbusdriver]

"Suspicious" yes. Dangerous, I seriously doubt it. There is still no malware for the Mac that doesn't require the user to install it. Not just downloading it, but providing your admin password when it attempt to install. Now, if Lorraine were using Windows (even via Boot Camp or a virtual machine) when this happened, she could have installed a Windows virus. Either way, a disk scan by Sophos and maybe even ClamXav should find and remove ant Windows malware.

Obviously, she needs to update Flash Player at the Adobe site. And I don't think she needs to feel any shame or disgrace from hitting the only button available. However, she now has another method of clearing the problem. Basically, any dialog that gives you no option to cancel the warning, is suspicious or downright intrusive. Apple's "Update available" dialog is exactly that; the only choice is "Update" or "More details" which opens the Mac App Store. It's the ONLY developer I know of that does this. Every single other developer offers at least a "Remind me later" option, if not a "Cancel" button. I fear Apple is too much in love with its own products. Note to Apple: You sold this stuff to us. It no longer belongs to you. Let it go and move on.

[LR827]

There was a translucent message to upgrade Flash hovering over the button I needed to press to upload the pdf I had chosen. I could not press the upload button without pressing the upgrade message. Finally I just went through with it. When I tried to install the flash dog that had downloaded, I got an error message, "installation unsuccessful."

Now I did go and check the version as jchuzi laid out the steps, and I did have an older version. So I went through my updater and installed, successfully, the newer version.

Do you think I still need to check anything for malware?

Thanks again for your help.

[Xairbusdriver]

QUOTE

Do you think I still need to check anything for malware?

Not required, there is still no malware for the Mac that doesn't also ask for your password. At least not yet. Chances of you having the first known example are probably pretty small. Still, and especially for your Windows using friends, having an app that can scan and remove Windows malware is handy. As I said, ClamXav and Sophos have free apps for the Mac. The Sophos rated high in a non-scientific test of several different apps, most of which are NOT free. Why pay for something when a free one will do a better job?

Just don't depend on any AV software to be your only protection. You are still the weakest link in any chain to prevent malware or loss of personal data. Think before you click. Install some javascript and Flash blocking extensions for your browser. If you can't get past a button, close the window and try again. If you can't use the site without the same problem, don't use the site and tell them why. If you must use the site, try a different browser.

I'm assuming you are familiar with the "NEVER CLICK A LINK IN AN EMAIL" counsel that we hammer home almost weekly. You can also disable remote images and html viewing of emails for a little more protection. html and most images are for useless stuff better viewed in a web browser. Email is for information, better known as text! That's my opinion, but that doesn't mean I'm wrong!

[LR827]

Thanks, Jim. Yes, I never click on links in email. Unless it's my own return address and they are promising me something extremely valuable for nothing!

[jchuzi]

There is a new update to Flash Player available. I just installed it via the Flash Player preference pane.

[Paddy]

Lorraine, either the site's Flash coding requires the latest version of Flash (the minimum version required can be hard-coded into the Flash code, or I suspect it can also be dynamic, requiring the latest version - probably "phones home" for that info, but having never put Flash anything on a site I've created or manage, I couldn't swear to that) OR your own installation of Flash is set to warn you to update.

See: http://www.macromedia.com/support/document...gs_manager.html

You should set it to warn you when there is an update available, given that most of the time those are security, not feature updates!

The fact that the update from the link at CreateSpace didn't work for you is a separate issue; it would be good if you could try it again (but you'd have to downgrade your Flash install, so not worth the effort) to see if it was a one-off glitch or if there is in fact something wrong with the link/installation process.

Whatever it is, I can almost guarantee you it's not malware that caused the problems you had.

[LR827]

Thanks, Paddy & Jon,
I am not inclined to try it again ... It was not updated, but it updated successfully when I changed to Firefox. Now I'm following Jon's latest link now and hopefully will be set for a while.
Thanks again!
Lorraine

[Xairbusdriver]

Reading the TidBITS latest edition, I cam across an article by Rich Mogull stating he has decided to stop messing with Flash completely, almost. Actually, he has removed the Flash Player from his drives and has isolated it for web sites by using Chrome. It seems Chrome runs its own version of Flash in a sandboxed area, adding another layer of protection from attacks. Plus, Chrome auto-updates so he has no need for the update requests from Adobe. <The whole article can be read here.> I've been having sluggish page downloading in Safari, even after deleting the Caches, so I installed Chrome and see how it goes. Also removed Flash Player and its pieces from my HD.

[jchuzi]

While puttering around, I came across Adobe Flash Player updates available for OS X on February 7, 2013. Apparently, one can get a warning if one's version of Flash Player is out of date (who knew?).