You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Eddie Strauss Author

Level 3

993 points

decryptedFile.DMG - Flash Player - why is that there?

I have 3 computers I take care of in my house and I try to keep them all up to date and well managed. This morning I repaired permissions on all of them. There were tons after the new Airport Utility install.

In Disk Utility, on the Mac Pro, on the left side where the disks are listed there is a line at the bottom of the HDs and this item I have never seen before:

"decryptedFile.DMG"

[disk image icon] Flash Player

Why? It only shows on one of the 3 computers. I remember getting an update notification from Adobe. The path to it as shown in the bottom of the Disk Utility window is

/Mac Pro HD/private/var/folders…. and on and on

the disk image shown under the title of the file is greyed out and indicates 'not mounted'.

Any ideas?

Posted on Jun 22, 2011 4:10 AM

Top-ranking reply

baltwo

Level 9

62,374 points

Posted on Jun 22, 2011 10:20 AM

COMMAND+click and drag off the DU window. It's a remnant left behind when you last installed Flash Player.

View in context

20 replies

Mar 13, 2013 11:40 AM in response to Eddie Strauss

This sound like the Flashback Trojan to me.

Have a look at this....

http://news.cnet.com/8301-27076_3-57410050-248/mac-flashback-malware-what-it-is- and-how-to-get-rid-of-it-faq/

MadMacs0

Level 5

5,227 points

Mar 13, 2013 4:31 PM in response to cristobal1960

cristobal1960 wrote:

what worries me is that no Apple employee or worker worker of Adobe Flash Player, to rule and say that's that Flash Player decryptedFile.dmg

What Apple or Adobe employee have you spoken to. You won't find any willing to speak here.

The real question: Can you locate that file anywhere on your hard drive? I feel confident it was deleted a long time ago, so why are you concerned about it. Just because it's listed in Disk Utility does not mean it's still on your computer. If you can't find it then just drag that icon off of DIsk Utility and never think of it again.

MadMacs0

Level 5

5,227 points

Mar 13, 2013 4:35 PM in response to Ideasplace

Note that the article is almost a year old and most of the A-V labs declared Flashback extinct several months back. If you read the caption under the illustration you will see that it was an older version of Flashback that was common in the Fall of 2011 and has not been seen since. The April/May version did not use a Flash Player installer, but a Java exploit to deliver it's malware.

If this is Flashback again, then it would have to be brand new and undiscovered.

May 5, 2014 1:14 PM in response to MadMacs0

Hello,

I have this on my computer as well. I believe it may have arrived when I downloaded a song from youtube using the converter at: http://www.youtube-mp3.org/

What steps need to be done to protect my computer now that I have ejected the false drive?

MadMacs0

Level 5

5,227 points

May 5, 2014 1:18 PM in response to Austin Samuel

Austin Samuel wrote:

Hello,

I have this on my computer as well. I believe it may have arrived when I downloaded a song

No, it was downloaded when you automatically installed Flash Player. It went to a temporary folder and either was or will be deleted the next time you reboot.

If it still appears in Disk Utility, drag it off the sidebar and it will vanish in a puff of smoke.

decryptedFile.DMG - Flash Player - why is that there?