Am relatively new to Norton and basically internet security, and I have been rather anxious over internet security recently. I review my security logs on a daily basis, and saw an entry yesterday that got me rather concerned.
There was a FlashPlayerInstaller.exe that seemed to have configured my firewalls (but I do not recall downloading anything related to Adobe during that period of time) and when I click on Norton file insight, the file cannot be found, which disturbs me as could this possibly be malware? It also does not seem to be on my computer anymore.
What is notable is that after an hour, there was an entry that I allowed an Adobe (R) Flash (R) Player Update Service 32.0 r0 to access my network resources, and I suddenly have Adobe Flash Player 32 PPAPI installed in my programs. Which I absolutely do not remember giving permissions to.
I have run a full Norton scan and downloaded Malwarebytes just for an on-demand scan, and it seems to have found nothing. I would just like to check if it is possible that FlashPlayerInstaller.exe is malware, and could still be hiding on my computer? I have done some google research where some forums seem to suggest that this file could potentially be malicious.
Would really appreciate some advice on this, thanks in advance for your time!
I have run the scan, and it has returned with all green ticks - can I conclude that there's nothing Norton found to be malicious to be running on my computer since it also ran diagnostics on the programs running?
Thank you!
The diagnostics scan does not look for malware. It only looks at your system configuration and lets you know if anything needs attention. Be sure to click the link at the top of the report that says "View in browser to print and save" or "Show all" to see the detailed report.
Ahhh, noted! I guess that's what causes the difference. I'm gonna try not to delve any deeper lest it causes me more anxiety, anyway it seems that all those logs were from Adobe and is a legit install so I guess I shouldn't be worried!
Thank you very much for all the info, really appreciate it!
I have run the scan, and it has returned with all green ticks - can I conclude that there's nothing Norton found to be malicious to be running on my computer since it also ran diagnostics on the programs running?
Its been in my Program Control every since the first time it asked me to allow it to update, noting I have all my programs set to ask first. So leaving it in Auto, I cant say for sure. I'd set Adobe Flash to "Notify you to install updates" and the next time it pops up, and you click OK, see if it shows up. If it doesn't, you can try resetting the firewall. Note, resetting will delete any custom setting and rules you may have previously setup.
Thanks for the info! Will this program rule only appear if I set the option to “notify you to install updates”? If I keep it as auto update, will the program rule still appear the next update like you mentioned? Since Adobe seems to already have updated twice, once in Aug and Sep and this program rule is still not present.
I guess it might be better if I stop obsessing over my Norton logs, as I always seem to find disturbing entries that I can't seem to understand.
Yep. The logs are past history. Norton has already dealt with everything in them. There is no need for any further action. If anything had required your attention or assistance, Norton would have alerted you at the time.
I would also recommend running the Norton Diagnostic Scan (Security > Scans). Open the results in a browser and print it out. It will list out all the currently running processes and programs installed on your system. You can use that as a reference to verify what is on the PC, which will give you a baseline for "normal." It will also alert you to any problem that Norton might find with your configuration or settings.
Its no cause for concern. It should show up after the next flash version update runs.
I would recommend changing the adobe flash setting to "Notify you to install updates".
Note, after making the above change and when you receive and click the notification, ensure you select "Notify you to install updates" each time or by default, it will revert back to hidden auto updates.
I checked my firewall rules and your screenshot which shows the program control rule for the installer/uninstaller is not present in my rules. Could I please check if this should be a cause of concern?
Thank you for all the informative replies. Indeed, it seems to be a legitimate installer as I did a quick google and the timestamp of the installers do seem to coincide with the release notes on Adobe's website:
I guess it might be better if I stop obsessing over my Norton logs, as I always seem to find disturbing entries that I can't seem to understand.
Nevertheless, thanks to all who responded to my query, you guys really alleviated my worries and helped me a great deal.
As SoulAsylum and SendOfJive stated, that log entry indicates Adobe Flash Player was installed on your system back on Aug 9, 2020.
Also, as SendOfJive noted, "Norton will grant it permissions as necessary because it is a known non-malicious program".
when I click on Norton file insight, the file cannot be found, which disturbs me as could this possibly be malware?
The reason you can't find the file in question is because the installer automatically deletes itself after the installation completes. This is normal behavior on its part.
What is notable is that after an hour, there was an entry that I allowed an Adobe (R) Flash (R) Player Update Service 32.0 r0 to access my network resources
After the install, Adobe will check for further updates and thereafter every 7 days. Hence why you saw this additional entry. If you want to be notified prior to Flash updates, you change the setting in the Flash Control panel to Notify you of Updates only. See pic below.
You may also see an entry under the Firewalls Program Control feature (see pic below).
Adobe does have a removal tool available. However, from what I can make of it, for Win 8 and above, you may have to make additional changes in your browser settings. Please see this link and read the notice at the top of the page Uninstall Flash Player | Windows
You may have to use "uninstall or change a program" in the Windows Control Panel to remove the flash player in Windows 10. Please ensure all browsers and any other programs that may use flash are closed first.
Windows Update does not account for all Flash Player updates. If you use Firefox, for example, it is possible that you have Flash Player installed as a browser extension (Shockwave Flash) and have it set to automatically update. If so, it will update silently in the background and Norton will grant it permissions as necessary because it is a known non-malicious program. PPAPI is the version for Chrome and Chromium-based browers. I believe Flash Player updates through those browsers as well. So almost certain that you have Flash Player installed and updating automatically.
I would uninstall it and reboot. FlashPlayer will be end of life on December 31, 2020. Most websites now use the HTML 5 standard in its place. Run Rkill just to be on the safe side after removal.
Thank you very much for your reply! I currently run Windows 10 Home, and I do not think that I ran any Windows Updates during that period of time, so I am not sure why this FlashPlayerInstaller.exe managed to download itself (I set my Downloads to ask where to save before downloading), or why Norton actually allowed it to create firewall rules to let it access my network resources.
In this case, would it also be advisable that I uninstall this program that seems to have come together with the two Norton entries in my post? Attached screenshot as follows -
Hello. What OS are you using? IF you are running Windows 10, ALL updates for Adobe Flash are done via Windows Updates. On versions of Windows other than 10, Adobe will periodically run an update check but certainly NOT an installer. If both Norton and MBAM show all clear you should not be infected. Download Rkill here. Run from your desktop. Its a free tool developed by the folks over at Bleeping Computer which will detect and stop any malicious processes running on your system.
I guess it might be better if I stop obsessing over my Norton logs, as I always seem to find disturbing entries that I can't seem to understand.
You may also see an entry under the Firewalls Program Control feature (see pic below). 
Adobe does have a removal tool available. However, from what I can make of it, for Win 8 and above, you may have to make additional changes in your browser settings. Please see this link and read the notice at the top of the page 
Thank you!