![Pinball Star download the new version for ios](https://cdn1.cdnme.se/5447227/9-3/screenshot_5_64e62947ddf2b306ca76f796.jpg)
![flash player extension chrome malware flash player extension chrome malware](https://news-cdn.softpedia.com/images/fitted/340x180/Fake-Flash-Player-Chrome-Extension-Launches-Click-Fraud-Site.jpg)
When Adobe (or any other software developer) publishes software executables (like installers), they cryptographically sign them. (lesson learned - in the future I will block Flashplayer). I don't know how to remove the malware and would greatly appreciate some guidance. I am presently working offline because I think the virus is a browser hijacker adware program. Two folders associated with the fake Adobe program appear in the top level of the Program Data directory (I used CCleaner to empty them, but I can't delete the folders) and the third is called Update6 and appears in Program Data / Adobe. There are 3 fake folders (as far as I know) that have been created and I can't delete them - a popup asks for admin details to change permissions, but I definitely won't provide anything. It keeps launching an update process in the background, and I end the task each time it restarts. My question for the community is how do I remove this from my system? Is there a fix? I uninstalled Flashplayer, deleted the executable, ran a full system scan with Bitdefender, but there is still malware on my computer.
![flash player extension chrome malware flash player extension chrome malware](https://www.tecmint.com/wp-content/uploads/2014/12/Install-Flash-Plugin.jpeg)
The fake file is called flashplayer32au_a_install.exe (I believe the legitimate file is flashplayer32_a_install.exe). I checked the properties, and it wasn't a system file like usual.
![flash player extension chrome malware flash player extension chrome malware](https://www.tech-recipes.com/wp-content/uploads/2018/04/chrome-1-500x404.png)
I then researched the name, and it is malware.
![flash player extension chrome malware flash player extension chrome malware](https://i.ytimg.com/vi/nrbuW2nGNM0/maxresdefault.jpg)
I allowed the download, ran a Bitdefender scan on the executable (it was clean), and then permitted the installation (it appeared legitimate) however I became suspicious as soon as the update completed because the executable file did not disappear from my download directory, as it usually does. I was prompted to update my Adobe Flashplayer on.
![Pinball Star download the new version for ios](https://cdn1.cdnme.se/5447227/9-3/screenshot_5_64e62947ddf2b306ca76f796.jpg)