Fake Flash Player Update pop up When try to access Google or Gmail

Posted by Muhammed Posted on Monday, May 26, 2014

Today some of my clients had problem with accessing Google and Gmail, they were getting a message says like “WARNING! Your flash Player may be out of date. Please update to continue".

WARNING! Your flash Player may be out of date. Please update to continue

If they tried to close or OK to the pop up message it redirect them a webpage looks like adobe and prompt to download different products.

Fake Flash Player Update


During my research I found, it is a DNS hijack. In my previous post I have explained whatis DNS hijacking and how does it work

To fix this problem, you need to check your DNS server configuration on your computer and router. For this follow the below steps

1. Open Command prompt (Start->Run->Type ‘cmd’)
2. In command prompt, type the command ipconfig /all and press enter
3. Then check the DNS server entry and if it is 23.253.94.129, no doubt that is the culprit

Hijacked DNS


Now you need to remove this entry from your computer or router

Open the Control panel, then Network and Sharing Center and access the active network card properties and change DNS server address. If it is not there, you have to check router and reset the settings.  Depends on the router model, these settings may be vary. If you know your router IP, User name and password, just login and check for DNS configuration settings. 

It is highly recommend to run a deep scan with updated Antivirus program to find out the dropper files if any. All the best !!!

Share your comments about this new threat if you are aware of it.