
If Norton and MBAM both gave your machine a clean bill of health, I'd still suggest you get your computer by a malware removal specialist as advised so that you have a definitive answer once and for all.Īnd just a side note. That raises the possibility that the warning to update Flash was legitimate and that you're on a wild goose chase trying to link minor problems on your computer to a suspected (but unconfirmed) malware or PUP infection.ĭid you ever submit the the suspicious C:\Windows\SysWOW64\Macromed\Flash\FLASHUTI元2_ 25_0_0_148_ PEPPER.exe file to as I suggested, and if so what was the detection rate for the file? You failed to mention in any of your previous posts that you also have Chrome installed on your machine and Chrome isn't shown in your system specs. I'm still checking to clarify two things: does the malicious pepper file affect Searches and is it related to the ransomware nasties? ( I've read somewhere that the answers are both yes so am off to find them). It’s a way for them to infect your computer.I've been forced to use Chrome at times because IE11 has been playing up at times. Manfred might be a lovely person, but there’s no reason in the world why an Adobe Flash update would be served up by a Belgian Web site owned by someone in China. To learn more, I used the online whois service to look up the information associated with this particular domain and, well, it’s the capper: That’s definitely more than just a bit suspicious. To confirm, look what you see when you go to that URL without all the odd stuff appended:

The “.be” domain is Belgium, but more importantly, it’s not or similar, so that’s a major problem. Still, it’s the URL that was a big red flag. There’s also some odd wording, like “Top Video Sites Require The Latest…” rather than something more like “This site has content that requires…” First off, the pop-up window is part of the landing page, not coming out of the Flash player itself. Looks legitimate, though there are a few things that made me instantly suspicious. Let’s look at one I bumped into while reading an article on, a quite reputable Web site:


Where’s the message coming from? Where is it taking you after you click - though you should never click if there’s even the slightest doubt. How can you tell? As always, pay attention to the URL. Instead, I believe you’ve bumped into one of the newer forms of malware distribution, a very smart design that is predicated on us users blindly clicking “update” if we’re told something we’re running is out of date. I’m so impressed that you’re skeptical about these sort of things because if your Flash player needs an update, it’s the player itself that will pop up the update window, meaning it won’t be part of the Web page that has the content in question.
