

When Adobe (or any other software developer) publishes software executables (like installers), they cryptographically sign them. (lesson learned - in the future I will block Flashplayer). I don't know how to remove the malware and would greatly appreciate some guidance. I am presently working offline because I think the virus is a browser hijacker adware program. Two folders associated with the fake Adobe program appear in the top level of the Program Data directory (I used CCleaner to empty them, but I can't delete the folders) and the third is called Update6 and appears in Program Data / Adobe. There are 3 fake folders (as far as I know) that have been created and I can't delete them - a popup asks for admin details to change permissions, but I definitely won't provide anything. It keeps launching an update process in the background, and I end the task each time it restarts. My question for the community is how do I remove this from my system? Is there a fix? I uninstalled Flashplayer, deleted the executable, ran a full system scan with Bitdefender, but there is still malware on my computer. The fake file is called flashplayer32au_a_install.exe (I believe the legitimate file is flashplayer32_a_install.exe). I checked the properties, and it wasn't a system file like usual. I then researched the name, and it is malware. I allowed the download, ran a Bitdefender scan on the executable (it was clean), and then permitted the installation (it appeared legitimate) however I became suspicious as soon as the update completed because the executable file did not disappear from my download directory, as it usually does. I was prompted to update my Adobe Flashplayer on.
