C:\Windows\system32\Macromed\flash\testUpdate.txt

Has Firefox in the last couple days put out any update that affects C:\Windows\system32\Macromed\flash\testUpdate.txt? Comodo keeps alerting me whenever I log into Firefox, so I am wondering if it is malware trying to trick me. I would think a valid update from Firefox would let me know by a method other than a Comodo alert. I keep getting Comodo alerts that Firefox is trying to create a new directory or file with the name above.

I read the threads of slappyfrogg. Has there been any new info since then?

 

Hello bbpathd1:wave Didn't you install Secunia? If so, open it and click scan now, and it will let you know.. There was an update to Macromedia Flash a short while back, I believe in November.......... What version do you have?

Secunia will also scan FF too, so any updates to anything, it will let you know..

Here is what mine is showing:
Adobe Macromedia Flash NPAPI version: 10.0.42.34
Adobe " Active X Control version: 10.0.42.34

Let Secunia scan, and click "Download Solution" and it will download the update, and do that with both, if Secunia tells you that you need them, and once that is done, reboot. Should be fine then...

 

TeeCee, my friend! So good to hear from you. I guess I need to always include WHICH of my computers I am discussing. This is my Compaq, NOT the Lenovo you helped me with a couple months ago.

Kes, I just saw your message. Please let Chaslang know I am NOT talking about the Lenovo that I have in a thread with him. This is the Compaq that Tim and he have both discussed with me. I had finished with Tim and toggled system restore on this one a few weeks ago. I'll wait patiently for Chaslang to get back to me on the Lenovo whenever it comes up in the queue. The Lenovo is sitting off the internet and turned off for now. Sorry to confuse you all with two different computers!

I had version 10.0.32.18--must have missed any notices about Adobe updates.

I did what you suggested with Secunia. Now I'm at the same version of Flash as you.

Interestingly, after I did the two updates in Secunia, I started to do one for Yahoo Messenger. IE7 opened up for that. And almost immediately after came a Comodo alert that IE was trying to create that same named .txt file, so I blocked it there too.

Now that I have the update, I'll see if that message disappears.

 

This is followup on this thread.

It was a long time in coming (011510), but finally someone answered me in the Mozilla forum. This was the reply:
Reply notification: From: "notifications@support.mozilla.com"
"Snerdly" has posted a reply to a thread you're watching.
You can view the thread and reply at the following URL:
https://support.mozilla.com/en-US/forum/1/519172#threadId553929

Message:
----------------------------------------------------------------------
I permanently blocked this random request today. Possible virus action?"

Snerdly" has posted a reply to a thread you're watching.
You can view the thread and reply at the following URL:
https://support.mozilla.com/en-US/forum/1/519172#threadId554977

Message:
----------------------------------------------------------------------
Prevx has this listed as cloaked malware. See:
http://www.prevx.com/filenames/X1407485673813183820-X1/UOYZSYDZ.EXE.html

testUpdate.txt

_________
Anyway, even after putting the most current version of Adobe Flash on my computer, Comodo is still blocking this thing. I may get dozens or even more than 100 attempts in a day when I use Firefox. And I have had it show up a few times when I use IE7, which I had been using much less often.

So, I will still block it every time it shows up.

 

Plodr, I have been out of town for a few weeks, so I am just now back at my Compaq computer.

I do not have a testUpdate.txt file in that folder either!

I have Flash10c.ocx, Flash10d.ocx, (both ActiveX controls), flashplayer.xpt, GetFlash.man, install.log (only text file), FlashUtil10d.exe, NPSWF32.dll (10.0.42.34 Shockwave Flash), NPSWF32_FlashUtil.exe, uninstall_activeX.exe and uninstall_plugin.exe.

I have been on the computer for about two hours now. When I click in Proactive Defense in Comodo on the number of suspicious attempts blocked so far, in Defense+Events screen that displays I already have about 40 instances of C:\Program Files\Mozilla Firefox\firefox.exe wanting to modify file C:\Windows\system32\Macromed\Flash\testUpdate.txt.

Any other thoughts? I am happily blocking and will keep at it.