# Getting rid of fake "adobe flash player out of date" virus on Safari

**URL:** <https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931>\
**Category:** Factual Questions\
**Created:** [March 4, 2020, 6:12pm UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931 "2020-03-04T18:12:38Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![CairoCarol](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cairocarol/32/3825_2.png) [@CairoCarol](https://boards.straightdope.com/u/CairoCarol)\
**Post date:** [March 4, 2020, 6:12pm UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931/1 "2020-03-04T18:12:38Z")

</div>

I have that stupid virus that hijacks my browser with very legit-looking messages saying I need to update Adobe flash. No idea how I got it (I’ve got Norton virus protection, dammit) but here I am. I do know not to click on anything, I just close my browser whenever it comes up.

Before I do anything to fix it, I just want to make sure I’m not making the problem worse or endangering my cybersecurity. So, if I follow [these instructions](https://macsecurity.net/view/227-adobe-flash-player-update-mac-virus) will I be okay?

---

<div class="post-metadata">

**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\
**Post date:** [March 4, 2020, 6:29pm UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931/2 "2020-03-04T18:29:10Z")

</div>

Those are terrible instructions. I wouldn’t follow them.

Make sure you have actual malware installed, that it’s not just the websites you are visiting - I had CNN serving annoying “Flash” updater malware last week.

Go to Safari -\> Preferences -\> Extensions, and see if there is anything suspicious in there. If so, remove it.

If you have never given permission for it to install anything, there should be no malware installed on your machine - there are no known “drive-by” exploits on OS X at this time.

---

<div class="post-metadata">

**Author:** ![dba\_Fred](https://avatars.discourse-cdn.com/v4/letter/d/c37758/32.png) [@dba\_Fred](https://boards.straightdope.com/u/dba_Fred)\
**Post date:** [March 5, 2020, 7:47am UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931/3 "2020-03-05T07:47:39Z")

</div>

I have the Adobe Flash Player preference set to notify me when there is an update so I can do it when/how I choose, not to do so automatically.  
First I quit all browsers, then I to to Apple in the top left of the Menu Bar -\> System Preferences -\> Other -\> Flash Player and click the 2 Check Now boxes (one at a time). That will open a browser to the Adobe site, check for an update and download a .dmg if there is one. After I’ve checked for the updates, I quit the browser, then open & run the .dmgs one at a time.

---

<div class="post-metadata">

**Author:** ![Alley\_Dweller](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alley_dweller/32/430_2.png) [@Alley\_Dweller](https://boards.straightdope.com/u/Alley_Dweller)\
**Post date:** [March 5, 2020, 10:59am UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931/4 "2020-03-05T10:59:10Z")

</div>

> [@CairoCarol](#):
>
> Before I do anything to fix it, I just want to make sure I’m not making the problem worse or endangering my cybersecurity. So, if I follow [these instructions](https://macsecurity/.net/view/227-adobe-flash-player-update-mac-virus) will I be okay?

I have broken the link so you can’t click on it.

When I try to click on that web site, my security program blocks it with reason [“PUP”](https://www.howtogeek.com/232791/pups-explained-what-is-a-potentially-unwanted-program/) (potentially unwanted program).

---

<div class="post-metadata">

**Author:** ![CairoCarol](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cairocarol/32/3825_2.png) [@CairoCarol](https://boards.straightdope.com/u/CairoCarol)\
**Post date:** [March 5, 2020, 10:20pm UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931/5 "2020-03-05T22:20:30Z")

</div>

> [@Alley\_Dweller](#):
>
> I have broken the link so you can’t click on it.
> 
> When I try to click on that web site, my security program blocks it with reason [“PUP”](https://www.howtogeek.com/232791/pups-explained-what-is-a-potentially-unwanted-program/) (potentially unwanted program).

Thanks! I thought I was being insanely over-cautious, but maybe I wasn’t being cautious enough.

---

<div class="post-metadata">

**Author:** ![CairoCarol](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cairocarol/32/3825_2.png) [@CairoCarol](https://boards.straightdope.com/u/CairoCarol)\
**Post date:** [March 5, 2020, 10:22pm UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931/6 "2020-03-05T22:22:25Z")

</div>

> [@beowulff](#):
>
> Go to Safari -\> Preferences -\> Extensions, and see if there is anything suspicious in there. If so, remove it.

Hmm, tried that … and the dialog box says “no extensions.”

The bad behavior comes and goes, and ONLY affects CNN. Could it be CNN-related somehow?

---

<div class="post-metadata">

**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\
**Post date:** [March 5, 2020, 11:20pm UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931/7 "2020-03-05T23:20:19Z")

</div>

> [@CairoCarol](#):
>
> Hmm, tried that … and the dialog box says “no extensions.”
> 
> The bad behavior comes and goes, and ONLY affects CNN. Could it be CNN-related somehow?

100%

> [@](#):
>
> Make sure you have actual malware installed, that it’s not just the websites you are visiting - I had CNN serving annoying “Flash” updater malware last week.

---

<div class="post-metadata">

**Author:** ![CairoCarol](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cairocarol/32/3825_2.png) [@CairoCarol](https://boards.straightdope.com/u/CairoCarol)\
**Post date:** [March 6, 2020, 12:26am UTC](https://boards.straightdope.com/t/getting-rid-of-fake-adobe-flash-player-out-of-date-virus-on-safari/848931/8 "2020-03-06T00:26:11Z")

</div>

Found an interesting discussion of the problem here:

> **[Safari wants to "update" Adobe Flash but only when visiting CNN dot com](https://forums.macrumors.com/threads/safari-wants-to-update-adobe-flash-but-only-when-visiting-cnn-dot-com.2224769/page-2?post=28252752#post-28252752)**
>
> I agree with this point completely, but many of the early posters felt even downloading something and just trashing the file exposed one to risk. Not sure why they think that though ...

Firefox is not affected so I’ll just use that for CNN (and NYT too, I guess - I’ve been too busy to do more than read their push notifications lately but it seems like going to their website may cause the same problem).

I’m just glad I didn’t click on the update stuff.
